2026-11-01_ca92efed342e12a6e73c2a3b1b9d72eb_amadey_elex_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-01_ca92efed342e12a6e73c2a3b1b9d72eb_amadey_elex_smoke-loader
Size 2.5MB
Sample261102-kms82a11dt
SHA256 ecb3aa5846072b776e3f943816a66a64fba2b3a34a9584615a6310ecf38c725f
MD5 ca92efed342e12a6e73c2a3b1b9d72eb
SHA1 ed6f655a81cf62b32fc9aecec834614c6d895e58
SHA512 86c7b45e180d9ca1536f7a0bd88d563c3d3c693b1b82e8a302a8323582e477a5aefe79999b7e3487b6aeb267cfceb20474cd94a7d11e3c072231e48b68a3c192
SSDEEP 49152:YLwGTMj1trZ97g9oUjRZhX6BFOPHzUiF91BdqCy3Issu6BWMujfNHygBm0:IwXj1tr+oUjF6vOPH5deKudhHycz
TLSH
T189C52360B751D133D87102310BB4DF6A9A3DBA251F1159E763986B7E9E303C1BB31B8A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-11-01_ca92efed342e12a6e73c2a3b1b9d72eb_amadey_elex_smoke-loader

.exe 2.5MB

2026-11-01_ca92efed342e12a6e73c2a3b1b9d72eb_amadey_elex_smoke-loader

IMPHASH 3dd7dd70beccea7767ffdb69ab9dae22
SHA256 ecb3aa5846072b776e3f943816a66a64fba2b3a34a9584615a6310ecf38c725f
MD5 ca92efed342e12a6e73c2a3b1b9d72eb
SHA1 ed6f655a81cf62b32fc9aecec834614c6d895e58
SHA512 86c7b45e180d9ca1536f7a0bd88d563c3d3c693b1b82e8a302a8323582e477a5aefe79999b7e3487b6aeb267cfceb20474cd94a7d11e3c072231e48b68a3c192
SSDEEP 49152:YLwGTMj1trZ97g9oUjRZhX6BFOPHzUiF91BdqCy3Issu6BWMujfNHygBm0:IwXj1tr+oUjF6vOPH5deKudhHycz
TLSH
T189C52360B751D133D87102310BB4DF6A9A3DBA251F1159E763986B7E9E303C1BB31B8A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

PE Signature issue

Digest

ee:4b:72:57:b9:a0:e4:0a:d8:73:aa:9b:f8:73:ab:87:55:3e:b8:74:01:f1:53:c9:47:bd:ef:d2:46:27:c0:8e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Softonic International S.L.

Chains

Oct 26, 2026

CN=Softonic International S.L.

Digest

72:b8:43:91:26:ae:00:a4:34:1c:b9:5d:81:6c:07:04:5c:6f:ad:c5

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=A62134341,CN=Softonic International SA,O=Softonic International SA,L=Barcelona,ST=Barcelona,C=ES,1.3.6.1.4.1.311.60.2.1.2=#130942617263656c6f6e61,1.3.6.1.4.1.311.60.2.1.3=#13024553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Aug 25, 2021

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

09:cf:1a:17:b7:d1:9e:ac:1a:be:ff:b6:80:cf:9b:1a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 15, 2021 - Jul 6, 2022

Subject

CN=Softonic International S.L.

Serial Number

7b:2e:88:e0:9b:64:8b:a5:4a:ee:c3:3d:a8:fe:26:81

Issuer

CN=Softonic International S.L.

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 21, 2021 - Jul 21, 2022

Minor OS version

Major OS version

Entry point

108676

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Admin\GIT\ubixInstaller\packer\Final\Packer.pdb

kernel32

CreateMutexW Sleep CloseHandle LoadLibraryW GetProcAddress CreateProcessW CreateDirectoryW SizeofResource GetCurrentProcess GetModuleFileNameW K32GetProcessImageFileNameA GetTempPathW FindResourceA K32GetProcessImageFileNameW LockResource LoadResource MultiByteToWideChar WideCharToMultiByte HeapSize SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage HeapReAlloc ReadConsoleW ReadFile EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW HeapAlloc GetConsoleMode FormatMessageA GetStringTypeW QueryPerformanceCounter LocalFree GetCurrentDirectoryW CreateFileW FindClose FindFirstFileExW FindNextFileW GetFileAttributesExW GetFullPathNameW SetEndOfFile SetFilePointerEx AreFileApisANSI GetLastError GetFileInformationByHandleEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwind RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetDriveTypeW ExitProcess GetModuleHandleExW GetStdHandle WriteFile HeapFree GetFileSizeEx GetFileType FlushFileBuffers GetConsoleOutputCP WriteConsoleW

user32

GetMessageW DefWindowProcW PostMessageW GetWindowLongW GetSystemMetrics RegisterClassExW ShowWindow DispatchMessageW SetLayeredWindowAttributes TranslateMessage LoadIconW LoadCursorW SetWindowLongW PostQuitMessage UpdateWindow CreateWindowExW

shell32

SHGetSpecialFolderPathW

shlwapi

PathFindFileNameW PathFileExistsW PathFindFileNameA

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_ca92efed342e12a6e73c2a3b1b9d72eb_amadey_elex_smoke-loader

PE Signature issue

kernel32

user32

shell32

shlwapi

generic