2026-11-01_b142ae39a40a4a8e78de64eda48fe9ce_amadey_elex_maze_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-01_b142ae39a40a4a8e78de64eda48fe9ce_amadey_elex_maze_smoke-loader
Size 6.6MB
Sample261102-nmjalseh37
SHA256 94f32689a35857412211a1737a04e6f37b8e907ddab405cd44abfe6be591f067
MD5 b142ae39a40a4a8e78de64eda48fe9ce
SHA1 3a338828f7bdb0e073b42dccb5666e525218767a
SHA512 9162d9c2a4f2169ca61d06be1c83ba29fb251d889d007fbd4df00aa3f3ba156c0f8db0ed5be72428d6ee4f1e6783e547b4caca3483e77e4a4056f68fda45e477
SSDEEP 196608:de3rX3MYQJ2tFzbyODoPkDmuwLNAF7+g1x+i2ez8zhI:debMYQJ2/ProMDmuwnQqq
TLSH
T103660213B700D122E55B0174791EE3E55168BA304A6A8883F6C4BF1FB9B0BD6E936F47
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_b142ae39a40a4a8e78de64eda48fe9ce_amadey_elex_maze_smoke-loader

File Explorer

2026-11-01_b142ae39a40a4a8e78de64eda48fe9ce_amadey_elex_maze_smoke-loader

.exe 6.6MB

2026-11-01_b142ae39a40a4a8e78de64eda48fe9ce_amadey_elex_maze_smoke-loader

IMPHASH 90e510af4e11c58efa66bdcd00ae182a
SHA256 94f32689a35857412211a1737a04e6f37b8e907ddab405cd44abfe6be591f067
MD5 b142ae39a40a4a8e78de64eda48fe9ce
SHA1 3a338828f7bdb0e073b42dccb5666e525218767a
SHA512 9162d9c2a4f2169ca61d06be1c83ba29fb251d889d007fbd4df00aa3f3ba156c0f8db0ed5be72428d6ee4f1e6783e547b4caca3483e77e4a4056f68fda45e477
SSDEEP 196608:de3rX3MYQJ2tFzbyODoPkDmuwLNAF7+g1x+i2ez8zhI:debMYQJ2/ProMDmuwnQqq
TLSH
T103660213B700D122E55B0174791EE3E55168BA304A6A8883F6C4BF1FB9B0BD6E936F47
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

269485

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapCreate GetExitCodeProcess GetFileAttributesW MulDiv CreateProcessA TerminateProcess GetTimeZoneInformation GetOverlappedResult CompareStringW ExitThread MultiByteToWideChar FlushFileBuffers GetTempPathW RaiseException FindFirstFileA GetCPInfoExW SetLastError CreateNamedPipeA EnterCriticalSection GlobalFree GetDiskFreeSpaceW FindClose LoadLibraryA DeviceIoControl CreatePipe EnumResourceTypesW GetModuleFileNameA GetThreadPriority FindNextFileW GetStringTypeW VirtualProtect GetThreadTimes OpenFileMappingA TlsFree EnumSystemLocalesW lstrcpyW DeleteFileA ExpandEnvironmentStringsW CreateThread SwitchToThread LeaveCriticalSection SetStdHandle CloseHandle SetFilePointerEx ReadConsoleW ReadFile GetConsoleMode OutputDebugStringW LCMapStringW HeapReAlloc GetCPInfo GetOEMCP GetACP IsValidCodePage GetModuleHandleW TlsSetValue TlsGetValue TlsAlloc SetUnhandledExceptionFilter UnhandledExceptionFilter FreeEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter CreateFileW WriteFile GetModuleFileNameW GetStartupInfoW DeleteCriticalSection GetFileType GetStdHandle GetProcessHeap GetCurrentThreadId IsDebuggerPresent GetVersionExW GetSystemTimeAdjustment FormatMessageW Sleep InitializeCriticalSectionAndSpinCount WideCharToMultiByte GetConsoleCP OpenProcess SetCommTimeouts GetCurrentThread GetTickCount ConnectNamedPipe WaitForSingleObject GetModuleHandleExW CreateDirectoryW HeapFree SetEnvironmentVariableW GetEnvironmentStringsW InitializeSListHead GetCurrentProcess CompareFileTime GetCommState SetDllDirectoryW LoadLibraryExW LoadResource FreeLibrary SetErrorMode SetEndOfFile GetDriveTypeW UnmapViewOfFile RtlCaptureContext GetLocaleInfoA SetFilePointer FindFirstFileW GetTempFileNameW WriteConsoleW ExitProcess HeapAlloc HeapSize GetProcAddress GetLastError IsProcessorFeaturePresent RtlUnwind GetCommandLineW DecodePointer EncodePointer

user32

CopyRect IsRectEmpty DrawFrameControl EndPaint ClientToScreen DestroyAcceleratorTable CharUpperBuffW CharNextW RegisterWindowMessageW IsIconic GetKeyState DrawIconEx LoadStringA GetWindowInfo GetMenuStringW CharLowerBuffW DrawTextExW ModifyMenuW GetDC CreateDialogIndirectParamA SetDlgItemInt GetMenu LoadMenuW GetWindowLongW DrawStateW CharUpperW SetWindowLongW DestroyCursor SendDlgItemMessageW GetDesktopWindow EnumChildWindows GetMenuItemCount MessageBoxW BeginDeferWindowPos SetDlgItemTextW SendMessageW EndMenu DestroyMenu GetDlgCtrlID SetWindowTextW ToUnicode GetSubMenu

gdi32

SetLayout CreateHatchBrush GetEnhMetaFileHeader PtInRegion CombineRgn RectInRegion Ellipse OffsetRgn SetPolyFillMode StretchDIBits GetBkColor CreateBitmapIndirect GetObjectW SetROP2 CloseEnhMetaFile CreateEnhMetaFileW PolyPolygon

comdlg32

GetOpenFileNameW FindTextW

advapi32

RegCloseKey RegLoadKeyW AdjustTokenPrivileges RegEnumKeyExW ControlService SetSecurityDescriptorOwner StartServiceW RegOpenKeyExA SetSecurityDescriptorDacl RegDeleteKeyA RegQueryValueExW OpenServiceW OpenSCManagerW OpenProcessToken RegSetValueExW

shell32

Shell_NotifyIconW CommandLineToArgvW

ole32

CoTaskMemFree CoInitialize

oleaut32

VariantChangeType SafeArrayCreate VariantClear SysReAllocStringLen SafeArrayPtrOfIndex

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_b142ae39a40a4a8e78de64eda48fe9ce_amadey_elex_maze_smoke-loader

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

generic