2026-10-25_c9bbfa2f27df3f4f3408a053ecfdd6ee_amadey_elex_maze_smoke-loader_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-25_c9bbfa2f27df3f4f3408a053ecfdd6ee_amadey_elex_maze_smoke-loader_stealc
Size 6.7MB
Sample261026-pmt8jsdy41
SHA256 ef82a213e08f7fed0782b49f305126e7d5380713d34d36a2dd0bf2875dd978c0
MD5 c9bbfa2f27df3f4f3408a053ecfdd6ee
SHA1 6b05aac9eb577a145647621d33871012e7fe11e2
SHA512 a70d85b5edd3727d0aaa16c653cf0dbac63ea35d1c2e6f361415b90405ad72f8a7062a8eb86c3ba7bc9e4cc6fb117b36a0f6657e667319b7567446246346ff54
SSDEEP 196608:qX7gpZJvd+bc9k0ODN2S5aU+DBRUfwrJbLUfCZ:ftd+A/k9DkKwtbwi
TLSH
T16B66F132B390D066D45B01F33519ABA941B87B704836884FBF947F1EA9B4AD2ED16F07
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-25_c9bbfa2f27df3f4f3408a053ecfdd6ee_amadey_elex_maze_smoke-loader_stealc

File Explorer

2026-10-25_c9bbfa2f27df3f4f3408a053ecfdd6ee_amadey_elex_maze_smoke-loader_stealc

.exe 6.7MB

2026-10-25_c9bbfa2f27df3f4f3408a053ecfdd6ee_amadey_elex_maze_smoke-loader_stealc

IMPHASH 1a40f7d5deece766a87f955fbe0d9f51
SHA256 ef82a213e08f7fed0782b49f305126e7d5380713d34d36a2dd0bf2875dd978c0
MD5 c9bbfa2f27df3f4f3408a053ecfdd6ee
SHA1 6b05aac9eb577a145647621d33871012e7fe11e2
SHA512 a70d85b5edd3727d0aaa16c653cf0dbac63ea35d1c2e6f361415b90405ad72f8a7062a8eb86c3ba7bc9e4cc6fb117b36a0f6657e667319b7567446246346ff54
SSDEEP 196608:qX7gpZJvd+bc9k0ODN2S5aU+DBRUfwrJbLUfCZ:ftd+A/k9DkKwtbwi
TLSH
T16B66F132B390D066D45B01F33519ABA941B87B704836884FBF947F1EA9B4AD2ED16F07
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

87005

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapReAlloc SetFilePointerEx ReadFile GetConsoleMode GetConsoleCP FlushFileBuffers CloseHandle FreeEnvironmentStringsW GetCurrentProcessId WriteFile GetModuleFileNameW GetFileType GetStdHandle GetProcessHeap GetACP LoadLibraryExW OutputDebugStringW SetStdHandle WriteConsoleW ReadConsoleW CreateFileW FindClose CompareStringW EnumSystemLocalesW GetOEMCP GetLocalTime IsValidCodePage SetLastError RaiseException GlobalUnlock TerminateProcess CreateProcessA GetProcessTimes SetCommState GetWindowsDirectoryA GetCurrentThread GetTickCount SetHandleInformation GetModuleHandleExW SetEndOfFile QueryPerformanceCounter SetEnvironmentVariableW GetCommState FreeLibrary GetEnvironmentStringsW GetCurrentThreadId IsDebuggerPresent WideCharToMultiByte EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection MultiByteToWideChar GetStringTypeW GetSystemTimeAsFileTime GetLastError HeapFree GetCommandLineW RtlUnwind GetCPInfo HeapAlloc IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcAddress LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID ExitProcess HeapSize

user32

GetWindowThreadProcessId SetRect MessageBoxA MessageBoxW ShowOwnedPopups GetWindowRect PostQuitMessage SendDlgItemMessageA LoadIconA GetClientRect BeginPaint SetScrollRange CreateIconIndirect GetDC GetQueueStatus ShowCursor PeekMessageA GetDesktopWindow IsDlgButtonChecked AppendMenuA ReleaseCapture EndMenu CheckMenuItem

gdi32

ExtCreateRegion CreatePolygonRgn SetWindowOrgEx SetLayout BitBlt TranslateCharsetInfo SetWindowExtEx Polygon ExcludeClipRect CreateBitmap DeleteObject GetPaletteEntries CreateCompatibleDC PlayEnhMetaFile CombineRgn RectInRegion RealizePalette StretchDIBits GetBkColor GetObjectW CreateRectRgn GetCharWidth32A SetTextAlign GetPixel GetStockObject CloseEnhMetaFile

advapi32

AdjustTokenPrivileges RegOpenKeyExW LookupPrivilegeValueW SetSecurityDescriptorDacl

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-25_c9bbfa2f27df3f4f3408a053ecfdd6ee_amadey_elex_maze_smoke-loader_stealc

kernel32

user32

gdi32

advapi32

ole32

generic