2026-11-03_ce326b52ac79f4ac8dedf285243da79c_amadey_elex_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-03_ce326b52ac79f4ac8dedf285243da79c_amadey_elex_smoke-loader
Size 10.8MB
Sample261104-jetzxsty8r
SHA256 274a779cb1ffc49df357344f6f994ddc3144de2cc63696400e47460bafbc1409
MD5 ce326b52ac79f4ac8dedf285243da79c
SHA1 34acb0d34226dee300d76f4361e5c6e204695012
SHA512 4eda838b039d8e159fccf8e651227df0deaa816061a7d881045027708404dced1fd486d080e8d5628bef5ab6670d65573f37140090bcece95ef992528fc59cef
SSDEEP 196608:0wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwI:
TLSH
T1C8B68D3996308877C07440BD677D7BA9927DFBE26279C17E274611ED8522A928CF033B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_ce326b52ac79f4ac8dedf285243da79c_amadey_elex_smoke-loader

File Explorer

2026-11-03_ce326b52ac79f4ac8dedf285243da79c_amadey_elex_smoke-loader

.exe 10.8MB

2026-11-03_ce326b52ac79f4ac8dedf285243da79c_amadey_elex_smoke-loader

IMPHASH 57fcd4b73bdcb72ae43e8e838f842fae
SHA256 274a779cb1ffc49df357344f6f994ddc3144de2cc63696400e47460bafbc1409
MD5 ce326b52ac79f4ac8dedf285243da79c
SHA1 34acb0d34226dee300d76f4361e5c6e204695012
SHA512 4eda838b039d8e159fccf8e651227df0deaa816061a7d881045027708404dced1fd486d080e8d5628bef5ab6670d65573f37140090bcece95ef992528fc59cef
SSDEEP 196608:0wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwI:
TLSH
T1C8B68D3996308877C07440BD677D7BA9927DFBE26279C17E274611ED8522A928CF033B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

97424

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\semafusayami14\zuso.pdb

kernel32

UnregisterWait GetNumaNodeProcessorMask SetCriticalSectionSpinCount SearchPathW SetInformationJobObject lstrcmpA FindFirstFileW SetThreadContext EnumCalendarInfoA WriteConsoleInputW IsBadStringPtrW lstrlenA GetConsoleAliasesLengthW EnumDateFormatsExW CopyFileExW GetNumaProcessorNode TlsGetValue SetLocalTime UnmapViewOfFile MoveFileExA CommConfigDialogA GetNumberOfConsoleInputEvents GetConsoleAliasExesLengthA SetErrorMode FindResourceW FreeLibrary DeleteVolumeMountPointA SetUnhandledExceptionFilter LoadLibraryExW SetDllDirectoryW InterlockedIncrement GetQueuedCompletionStatus VerSetConditionMask MoveFileExW InterlockedDecrement WaitNamedPipeA SetMailslotInfo SetConsoleActiveScreenBuffer WritePrivateProfileSectionA SetDefaultCommConfigW SetEnvironmentVariableW GetNamedPipeHandleStateA SignalObjectAndWait AddConsoleAliasW GetComputerNameW SetEvent SetThreadExecutionState OpenSemaphoreA CreateHardLinkA GetFileAttributesExA _lclose GetModuleHandleW GetTickCount GetCommConfig GetProcessHeap IsBadReadPtr GetSystemTimeAsFileTime GetPrivateProfileStringW GetConsoleTitleA ReadConsoleW CreateRemoteThread GetCompressedFileSizeW EnumTimeFormatsA SetCommTimeouts CreateActCtxW InitializeCriticalSection GetProcessTimes TlsSetValue AllocateUserPhysicalPages OpenProcess FindResourceExA GlobalAlloc GetPrivateProfileIntA LoadLibraryW GetConsoleMode FatalAppExitW GetThreadSelectorEntry AssignProcessToJobObject GetCalendarInfoA ReadFileScatter SetSystemTimeAdjustment SetVolumeMountPointA ReadConsoleOutputW SetConsoleCP InterlockedPopEntrySList LeaveCriticalSection GetFileAttributesA GlobalFlags lstrcpynW GetNamedPipeInfo HeapValidate GetVolumePathNamesForVolumeNameW CreateSemaphoreA SetConsoleCursorPosition VerifyVersionInfoA HeapQueryInformation WritePrivateProfileSectionW TerminateProcess GetAtomNameW FileTimeToSystemTime EnumResourceNamesW lstrcatA GetBinaryTypeW CompareStringW ExitThread GetVolumePathNameA lstrlenW SetConsoleTitleA WritePrivateProfileStringW GlobalUnlock VirtualUnlock GetTempPathW GetStringTypeExA CreateJobObjectA GetLargestConsoleWindowSize GetPrivateProfileIntW InterlockedExchange ReleaseActCtx SetCurrentDirectoryA GetStdHandle FindFirstFileA GetLastError ChangeTimerQueueTimer GetLongPathNameW BindIoCompletionCallback GetProcAddress FindVolumeMountPointClose VirtualAlloc HeapSize BackupWrite VerLanguageNameA SetFirmwareEnvironmentVariableW CreateNamedPipeA CreateJobSet LocalLock LockFileEx BuildCommDCBW DefineDosDeviceA FindClose GetPrivateProfileStringA LoadLibraryA Process32FirstW OpenMutexA ProcessIdToSessionId MoveFileA BuildCommDCBAndTimeoutsW GetExitCodeThread GetNumberFormatW SetFileApisToANSI QueryDosDeviceW SetConsoleWindowInfo SetThreadIdealProcessor HeapWalk GetPrivateProfileStructA GetTapeParameters GetVolumePathNamesForVolumeNameA GetModuleFileNameA GetDefaultCommConfigA FindNextFileA WriteProfileStringA WTSGetActiveConsoleSessionId EnumDateFormatsA WaitCommEvent _lread FindFirstChangeNotificationA GetProcessShutdownParameters QueueUserWorkItem ContinueDebugEvent IsDebuggerPresent GetProcessAffinityMask FreeEnvironmentStringsW EnumResourceNamesA WriteProfileStringW EnumDateFormatsW FatalAppExitA PeekConsoleInputA DeleteCriticalSection WriteConsoleOutputAttribute OutputDebugStringA GetCPInfoExA DuplicateHandle FindFirstVolumeA GetVersionExA ReadConsoleInputW TlsAlloc TerminateJobObject CloseHandle GetVersion DeleteTimerQueueTimer GlobalAddAtomW SetFileValidData FindActCtxSectionStringW ResetWriteWatch UnregisterWaitEx ReadConsoleOutputCharacterW TlsFree GetProfileSectionW EnumSystemLocalesW lstrcpyW CreateFileW SetStdHandle GetThreadContext GetPrivateProfileSectionNamesW GetFullPathNameA GetModuleFileNameW ExitProcess RaiseException GetCommandLineW HeapSetInformation GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId DecodePointer GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType EncodePointer SetLastError HeapCreate WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage EnterCriticalSection GetCurrentProcess UnhandledExceptionFilter HeapAlloc HeapReAlloc HeapFree RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW WriteConsoleW OutputDebugStringW IsProcessorFeaturePresent SetFilePointer GetConsoleCP FlushFileBuffers

user32

GetMessageTime

gdi32

GetBitmapBits

advapi32

InitiateSystemShutdownA GetFileSecurityW

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-03_ce326b52ac79f4ac8dedf285243da79c_amadey_elex_smoke-loader

kernel32

user32

gdi32

advapi32

msimg32

generic