2026-10-27_dd2d08ba1d38b67ff255e4f0d4274025_amadey_elex_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-27_dd2d08ba1d38b67ff255e4f0d4274025_amadey_elex_smoke-loader
Size 334KB
Sample261028-w2y9daft2l
SHA256 567f0513289a30b1991e47df8629f1b8532c0c14e292a6dffbab873ab32777ce
MD5 dd2d08ba1d38b67ff255e4f0d4274025
SHA1 dfd4e98d676de65a9068f4e9fcd875dfaa54753d
SHA512 7b406be6ff34b4218340db7c9e98c67dee6db76127f75f170e634df637e2e1bead74c3b0952a7a53504ae6769215ee3f20a8cb0d0ac8dc53df8070d98504aeff
SSDEEP 6144:kYXJ+ugG6l/Mit5a0kTLDUPDTPrQ3tiAoAshRJH:zFgFUit5a0kTLwPrQURAshR
TLSH
T138748D00ABA1C434F1F313FC99B99268B53E79A16B6590CF62D516EE4A35AE0FC31317
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-27_dd2d08ba1d38b67ff255e4f0d4274025_amadey_elex_smoke-loader

File Explorer

2026-10-27_dd2d08ba1d38b67ff255e4f0d4274025_amadey_elex_smoke-loader

.exe 334KB

2026-10-27_dd2d08ba1d38b67ff255e4f0d4274025_amadey_elex_smoke-loader

IMPHASH b2e29795cf26e2405a95e142d139ea34
SHA256 567f0513289a30b1991e47df8629f1b8532c0c14e292a6dffbab873ab32777ce
MD5 dd2d08ba1d38b67ff255e4f0d4274025
SHA1 dfd4e98d676de65a9068f4e9fcd875dfaa54753d
SHA512 7b406be6ff34b4218340db7c9e98c67dee6db76127f75f170e634df637e2e1bead74c3b0952a7a53504ae6769215ee3f20a8cb0d0ac8dc53df8070d98504aeff
SSDEEP 6144:kYXJ+ugG6l/Mit5a0kTLDUPDTPrQ3tiAoAshRJH:zFgFUit5a0kTLwPrQURAshR
TLSH
T138748D00ABA1C434F1F313FC99B99268B53E79A16B6590CF62D516EE4A35AE0FC31317
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

114928

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\yor\mafufeyazacip\negoruk\feze\mu.pdb

kernel32

SetDllDirectoryW InterlockedIncrement _lwrite SetFirmwareEnvironmentVariableA GetSystemWindowsDirectoryW GetNamedPipeHandleStateA SetHandleInformation GetComputerNameW GetModuleHandleW GetTickCount GetProcessHeap GetConsoleAliasesLengthA ConvertFiberToThread ReadConsoleW GetCompressedFileSizeW GetSystemWow64DirectoryA TlsSetValue LoadLibraryW GetConsoleMode CopyFileW SetVolumeMountPointA GetVersionExW HeapCreate HeapValidate GetModuleFileNameW CreateActCtxA GetACP GetStartupInfoW WritePrivateProfileStringW VerifyVersionInfoW FindFirstFileExA GetLastError IsDBCSLeadByteEx SetLastError SetWaitableTimer CreateNamedPipeA CopyFileA FindClose GetPrivateProfileStringA ProcessIdToSessionId LocalAlloc IsWow64Process SetCurrentDirectoryW GetVolumePathNamesForVolumeNameA GetModuleFileNameA SetConsoleCursorInfo GetProcessShutdownParameters FreeEnvironmentStringsW WriteProfileStringW BuildCommDCBA VirtualProtect CompareStringA GetSystemRegistryQuota ReadConsoleInputW FileTimeToLocalFileTime CreateWaitableTimerA GetSystemTime TlsFree CommConfigDialogW CloseHandle CreateFileW SetStdHandle GetConsoleCP SetFilePointer LCMapStringW OutputDebugStringW WriteConsoleW FlushFileBuffers GetLongPathNameA WriteConsoleInputW OutputDebugStringA InterlockedDecrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection EncodePointer DecodePointer GetCommandLineA HeapSetInformation IsBadReadPtr RaiseException RtlUnwind IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount SetUnhandledExceptionFilter QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetProcAddress ExitProcess WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType TlsAlloc TlsGetValue WriteFile HeapAlloc HeapReAlloc HeapSize HeapQueryInformation TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapFree GetOEMCP GetCPInfo IsValidCodePage GetStringTypeW MultiByteToWideChar

user32

GetMessageTime GetCaretBlinkTime GetMenuItemID GetMenuBarInfo GetMonitorInfoA GetCursorInfo GetListBoxInfo GetMenuInfo GetComboBoxInfo

gdi32

GetBitmapBits

winhttp

WinHttpWriteData

msimg32

GradientFill

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-27_dd2d08ba1d38b67ff255e4f0d4274025_amadey_elex_smoke-loader

kernel32

user32

gdi32

winhttp

msimg32

generic