2026-11-01_b9b8638ad8e6f1e902ef13ce6e43a0de_amadey_elex_emotet_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-01_b9b8638ad8e6f1e902ef13ce6e43a0de_amadey_elex_emotet_smoke-loader_stop
Size 1.5MB
Sample261102-mlzersvt7k
SHA256 50a78781f0232e8874f0c203c51373ea849c394b9882a4f08fdcb9b611d88c20
MD5 b9b8638ad8e6f1e902ef13ce6e43a0de
SHA1 dc8d469f55bdb5ce185402788274e6de7b0a6a42
SHA512 7be0e3a542fefb20650465b4aefcd84fa123d6808f8fb0fc6ff810344ec58d14146bb72c87caeccb0b620c2dc1445d10b75320b2f924fcffbb38fb4b2695cbfc
SSDEEP 12288:gXqTiYPtOOwpk6Xc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DB9:wGPIpbsqjnhMgeiCl7G0nehbGZpbD
TLSH
T11075F1113BD9C876D66211334696CF59A6B2BD11BF3086C73B923EDDE9301C1AE39392
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_b9b8638ad8e6f1e902ef13ce6e43a0de_amadey_elex_emotet_smoke-loader_stop

File Explorer

2026-11-01_b9b8638ad8e6f1e902ef13ce6e43a0de_amadey_elex_emotet_smoke-loader_stop

.exe 1.5MB

2026-11-01_b9b8638ad8e6f1e902ef13ce6e43a0de_amadey_elex_emotet_smoke-loader_stop

IMPHASH 86d56872828febfcf059bd11a311cc20
SHA256 50a78781f0232e8874f0c203c51373ea849c394b9882a4f08fdcb9b611d88c20
MD5 b9b8638ad8e6f1e902ef13ce6e43a0de
SHA1 dc8d469f55bdb5ce185402788274e6de7b0a6a42
SHA512 7be0e3a542fefb20650465b4aefcd84fa123d6808f8fb0fc6ff810344ec58d14146bb72c87caeccb0b620c2dc1445d10b75320b2f924fcffbb38fb4b2695cbfc
SSDEEP 12288:gXqTiYPtOOwpk6Xc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DB9:wGPIpbsqjnhMgeiCl7G0nehbGZpbD
TLSH
T11075F1113BD9C876D66211334696CF59A6B2BD11BF3086C73B923EDDE9301C1AE39392
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

115435

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

U:\develop\global\Release\bin\acad\WSCADMgrCtrlUtility.pdb

mpr

WNetGetUniversalNameW

kernel32

HeapFree HeapAlloc GetProcessHeap GetStartupInfoW RtlUnwind RaiseException HeapReAlloc ExitProcess HeapSize GetStdHandle GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime TerminateProcess IsDebuggerPresent GetCPInfo GetACP GetOEMCP LCMapStringA LCMapStringW Sleep VirtualAlloc GetTimeZoneInformation GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode GetCurrentDirectoryA GetDriveTypeA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA WritePrivateProfileStringW SetErrorMode FindResourceExW lstrlenA TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement GlobalFlags GetCurrentProcessId GetCurrentThread ConvertDefaultLocale GetVersion EnumResourceLanguagesW lstrcmpA GetLocaleInfoW CompareStringA InterlockedExchange GetModuleHandleA InterlockedDecrement GetVersionExW FindNextFileW GetFileTime FileTimeToLocalFileTime FileTimeToSystemTime CreateFileW GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle CloseHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale VirtualProtect GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom CompareStringW lstrcmpW GetModuleHandleW GetVersionExA GetLastError SetLastError GlobalAlloc FormatMessageW LocalFree MulDiv GlobalLock GlobalUnlock GlobalFree FreeResource LoadLibraryA GetModuleFileNameW lstrlenW LoadLibraryExW LoadLibraryW GetProcAddress GetFileAttributesW FreeLibrary IsDBCSLeadByte WideCharToMultiByte FindResourceW LoadResource LockResource SizeofResource MultiByteToWideChar SetUnhandledExceptionFilter

user32

UnregisterClassW DestroyMenu LoadCursorW GetSysColorBrush GetWindowThreadProcessId SetCursor GetMessageW TranslateMessage GetCursorPos ValidateRect PostQuitMessage EndPaint BeginPaint ReleaseDC GetDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW CharUpperW MapDialogRect GetAsyncKeyState ShowWindow MoveWindow SetWindowTextW IsDialogMessageW SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW ModifyMenuW EnableMenuItem CheckMenuItem SendDlgItemMessageW SendDlgItemMessageA WinHelpW GetCapture SetWindowsHookExW CallNextHookEx GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW SetFocus GetWindowTextLengthW GetWindowTextW GetForegroundWindow GetLastActivePopup DispatchMessageW GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageW MapWindowPoints SetForegroundWindow IsWindowVisible UpdateWindow GetClientRect GetMenu PostMessageW CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW GetSysColor AdjustWindowRectEx ScreenToClient CopyRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW SetWindowLongW SetWindowPos RegisterWindowMessageW SystemParametersInfoA IsIconic GetWindowPlacement GetWindow GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu GetActiveWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamW DestroyWindow IsWindow GetWindowLongW GetDlgItem IsWindowEnabled GetNextDlgTabItem EndDialog MessageBoxW GetDesktopWindow GetWindowRect LoadIconW GetParent GetKeyState SendMessageW EnableWindow GetFocus UnregisterClassA

gdi32

DeleteDC GetStockObject EnumFontFamiliesExW ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutW TextOutW RectVisible GetDeviceCaps DeleteObject SetMapMode RestoreDC SaveDC CreateBitmap GetObjectW SetBkColor SetTextColor GetClipBox PtVisible

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter

advapi32

RegQueryValueW RegEnumKeyW RegDeleteKeyW RegOpenKeyW RegCloseKey RegOpenKeyExA RegQueryValueExA RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegEnumKeyExW RegQueryValueExW

shell32

SHBindToParent SHGetDesktopFolder SHBrowseForFolderW SHGetSpecialFolderLocation SHGetPathFromIDListW

comctl32

ord17

shlwapi

StrRetToBufW PathStripToRootW PathFindExtensionW PathIsUNCW PathFindFileNameW

ole32

CoInitialize CoTaskMemFree CoUninitialize

oleaut32

SysAllocStringLen SysFreeString VariantClear VariantChangeType VariantInit

msi

ord173 ord70

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_b9b8638ad8e6f1e902ef13ce6e43a0de_amadey_elex_emotet_smoke-loader_stop

mpr

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

msi

generic