2026-11-12_425a33c8ac5e3ac1ecebd86a1abe29f4_amadey_elex_emotet_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-12_425a33c8ac5e3ac1ecebd86a1abe29f4_amadey_elex_emotet_smoke-loader_stop
Size 1.4MB
Sample261113-e25mqafw4s
SHA256 4b7520fe390b1a16cb2927d2dd4451d74eec2f4fbe70cdc305d7ec196ef7a97b
MD5 425a33c8ac5e3ac1ecebd86a1abe29f4
SHA1 f1abf812298e90809b8688984ba6817596cf48e7
SHA512 f2ceb07f96796797b3fce31ed7c4f95b053ed77a9e5ec89107ab872bb5a57258c5cfcbe3d316fffe5cca00375826751a01bf1bec798138132581bf56d349d88a
SSDEEP 12288:kc9uhnQt3U9ASkna9f0XQK5sn4AM6fyOx7C1Mu7sezGdRWiOZ96F9hVu1wwG:kc3aHknaFgX5s4MJxq7s8GSd6nm1ww
TLSH
T12A65F1523AE2C836C656057308D98B6DB276BE51AB25DC8327E47F1DFA351C39A39303
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-12_425a33c8ac5e3ac1ecebd86a1abe29f4_amadey_elex_emotet_smoke-loader_stop

File Explorer

2026-11-12_425a33c8ac5e3ac1ecebd86a1abe29f4_amadey_elex_emotet_smoke-loader_stop

.exe 1.4MB

2026-11-12_425a33c8ac5e3ac1ecebd86a1abe29f4_amadey_elex_emotet_smoke-loader_stop

IMPHASH 926f99aac438de606bd7403be14c723e
SHA256 4b7520fe390b1a16cb2927d2dd4451d74eec2f4fbe70cdc305d7ec196ef7a97b
MD5 425a33c8ac5e3ac1ecebd86a1abe29f4
SHA1 f1abf812298e90809b8688984ba6817596cf48e7
SHA512 f2ceb07f96796797b3fce31ed7c4f95b053ed77a9e5ec89107ab872bb5a57258c5cfcbe3d316fffe5cca00375826751a01bf1bec798138132581bf56d349d88a
SSDEEP 12288:kc9uhnQt3U9ASkna9f0XQK5sn4AM6fyOx7C1Mu7sezGdRWiOZ96F9hVu1wwG:kc3aHknaFgX5s4MJxq7s8GSd6nm1ww
TLSH
T12A65F1523AE2C836C656057308D98B6DB276BE51AB25DC8327E47F1DFA351C39A39303
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

91144

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

U:\develop\global\Release\bin\acad\AdSubaware.pdb

wininet

InternetGetConnectedState InternetCheckConnectionW

kernel32

GetFileAttributesW HeapFree HeapAlloc GetProcessHeap GetStartupInfoW ExitProcess HeapReAlloc HeapSize RtlUnwind RaiseException ExitThread CreateThread GetStdHandle GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime TerminateProcess SetUnhandledExceptionFilter IsDebuggerPresent VirtualAlloc GetCPInfo GetACP GetOEMCP LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetErrorMode FlushFileBuffers SetFilePointer WriteFile ReadFile WritePrivateProfileStringW GetThreadLocale InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GlobalFlags GetCurrentProcessId lstrlenA GetCurrentThread ConvertDefaultLocale GetVersion EnumResourceLanguagesW lstrcmpA InterlockedExchange GlobalAlloc FormatMessageW LocalFree MulDiv GetModuleHandleA CreateEventW SuspendThread SetEvent InterlockedDecrement GetModuleFileNameW GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom CompareStringW LoadLibraryA lstrcmpW MultiByteToWideChar GetVersionExA SetLastError GlobalLock GlobalUnlock GlobalFree FreeResource WideCharToMultiByte GetVersionExW GetLocaleInfoW GetCurrentProcess LoadLibraryW GetProcAddress GetModuleHandleW lstrlenW Sleep FreeLibrary LoadLibraryExW GetLastError CreateMutexW CloseHandle ReleaseMutex GetExitCodeThread WaitForSingleObject SetThreadPriority ResumeThread FindResourceW LoadResource LockResource SizeofResource VirtualFree

user32

DestroyMenu GetSysColorBrush GetWindowThreadProcessId SetCursor PostQuitMessage ShowWindow SetWindowTextW IsDialogMessageW EndPaint BeginPaint ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW GetMessageW TranslateMessage GetCursorPos ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW ModifyMenuW GetMenuState EnableMenuItem CheckMenuItem RegisterWindowMessageW UnregisterClassA WinHelpW GetCapture SetWindowsHookExW CallNextHookEx GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW GetFocus SetFocus GetWindowTextW DispatchMessageW GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageW MapWindowPoints GetKeyState IsWindowVisible UpdateWindow GetMenu GetSubMenu GetMenuItemID GetMenuItemCount CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW GetSysColor AdjustWindowRectEx PtInRect GetDlgCtrlID CallWindowProcW SetWindowLongW SetWindowPos SystemParametersInfoA GetWindowPlacement GetWindowRect GetWindow SendDlgItemMessageA ReleaseDC GetDC CopyRect GetDesktopWindow GetActiveWindow SetActiveWindow CreateDialogIndirectParamW DestroyWindow GetWindowLongW GetDlgItem IsWindowEnabled GetParent GetNextDlgTabItem EndDialog MessageBoxW LoadCursorW DefWindowProcW IsWindow SetForegroundWindow GetLastActivePopup FindWindowW UnregisterClassW EnableWindow PostMessageW SendMessageW DrawIcon GetClientRect GetSystemMetrics IsIconic LoadIconW GetForegroundWindow SendDlgItemMessageW

gdi32

DeleteDC PtVisible GetStockObject GetDeviceCaps ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutW TextOutW DeleteObject SetMapMode RestoreDC SaveDC CreateBitmap GetObjectW SetBkColor SetTextColor GetClipBox RectVisible

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

advapi32

RegEnumKeyW RegSetValueExW RegCreateKeyExW RegQueryValueW RegCloseKey RegDeleteKeyW RegOpenKeyW RegQueryValueExW RegEnumValueW RegOpenKeyExW

comctl32

ord17

shlwapi

PathFindExtensionW PathFileExistsW PathFindFileNameW PathRemoveArgsW PathUnquoteSpacesW

ole32

CLSIDFromProgID CoTaskMemFree CoInitializeEx CoUninitialize StringFromCLSID CoCreateInstance

oleaut32

SafeArrayGetUBound VariantChangeType SafeArrayUnlock SafeArrayLock SysFreeString SysAllocStringLen SysAllocString VariantClear VariantInit SafeArrayDestroy SafeArrayGetVartype SafeArrayCopy SafeArrayGetLBound SafeArrayCreate

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-12_425a33c8ac5e3ac1ecebd86a1abe29f4_amadey_elex_emotet_smoke-loader_stop

wininet

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

shlwapi

ole32

oleaut32

generic