2026-11-12_40c22c2654924e06fb03e0271e45cd4a_amadey_elex_emotet_smoke-loader_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-12_40c22c2654924e06fb03e0271e45cd4a_amadey_elex_emotet_smoke-loader_stop
Size 1.5MB
Sample261113-e8lhesfw5w
SHA256 a2339aae6560c7422022ae2094127e946bf1bc9a76a656039295afb90f822fd6
MD5 40c22c2654924e06fb03e0271e45cd4a
SHA1 f9961fdf3213e24e4328ec96d24ed7c78df65652
SHA512 ad68c559cd77eb1fb92bb2855d945dc1e6dcb508d2e48b61a3f4c3a31e4b0dc91e912d57c53af89d9b88fce79cb2253d388dd7ea331318aed7399f7bb55f45d3
SSDEEP 12288:8XqTiYPtUOwpk3kna9f0XQK5sn4AM6fyOx7C1Mu7sezGdRWiOZ96F9hVu1wwG:MGP+pMknaFgX5s4MJxq7s8GSd6nm1ww
TLSH
T1A475F1013BD9C936D69211334696CF59E6B4BC05BF3096C77B923E9CE9306C2AD3A391
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-12_40c22c2654924e06fb03e0271e45cd4a_amadey_elex_emotet_smoke-loader_stop

File Explorer

2026-11-12_40c22c2654924e06fb03e0271e45cd4a_amadey_elex_emotet_smoke-loader_stop

.exe 1.5MB

2026-11-12_40c22c2654924e06fb03e0271e45cd4a_amadey_elex_emotet_smoke-loader_stop

IMPHASH 86d56872828febfcf059bd11a311cc20
SHA256 a2339aae6560c7422022ae2094127e946bf1bc9a76a656039295afb90f822fd6
MD5 40c22c2654924e06fb03e0271e45cd4a
SHA1 f9961fdf3213e24e4328ec96d24ed7c78df65652
SHA512 ad68c559cd77eb1fb92bb2855d945dc1e6dcb508d2e48b61a3f4c3a31e4b0dc91e912d57c53af89d9b88fce79cb2253d388dd7ea331318aed7399f7bb55f45d3
SSDEEP 12288:8XqTiYPtUOwpk3kna9f0XQK5sn4AM6fyOx7C1Mu7sezGdRWiOZ96F9hVu1wwG:MGP+pMknaFgX5s4MJxq7s8GSd6nm1ww
TLSH
T1A475F1013BD9C936D69211334696CF59E6B4BC05BF3096C77B923E9CE9306C2AD3A391
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

115435

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

U:\develop\global\Release\bin\acad\WSCADMgrCtrlUtility.pdb

mpr

WNetGetUniversalNameW

kernel32

HeapFree HeapAlloc GetProcessHeap GetStartupInfoW RtlUnwind RaiseException HeapReAlloc ExitProcess HeapSize GetStdHandle GetModuleFileNameA UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime TerminateProcess IsDebuggerPresent GetCPInfo GetACP GetOEMCP LCMapStringA LCMapStringW Sleep VirtualAlloc GetTimeZoneInformation GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode GetCurrentDirectoryA GetDriveTypeA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA WritePrivateProfileStringW SetErrorMode FindResourceExW lstrlenA TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement GlobalFlags GetCurrentProcessId GetCurrentThread ConvertDefaultLocale GetVersion EnumResourceLanguagesW lstrcmpA GetLocaleInfoW CompareStringA InterlockedExchange GetModuleHandleA InterlockedDecrement GetVersionExW FindNextFileW GetFileTime FileTimeToLocalFileTime FileTimeToSystemTime CreateFileW GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle CloseHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetThreadLocale VirtualProtect GetCurrentThreadId GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom CompareStringW lstrcmpW GetModuleHandleW GetVersionExA GetLastError SetLastError GlobalAlloc FormatMessageW LocalFree MulDiv GlobalLock GlobalUnlock GlobalFree FreeResource LoadLibraryA GetModuleFileNameW lstrlenW LoadLibraryExW LoadLibraryW GetProcAddress GetFileAttributesW FreeLibrary IsDBCSLeadByte WideCharToMultiByte FindResourceW LoadResource LockResource SizeofResource MultiByteToWideChar SetUnhandledExceptionFilter

user32

UnregisterClassW DestroyMenu LoadCursorW GetSysColorBrush GetWindowThreadProcessId SetCursor GetMessageW TranslateMessage GetCursorPos ValidateRect PostQuitMessage EndPaint BeginPaint ReleaseDC GetDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW CharUpperW MapDialogRect GetAsyncKeyState ShowWindow MoveWindow SetWindowTextW IsDialogMessageW SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW ModifyMenuW EnableMenuItem CheckMenuItem SendDlgItemMessageW SendDlgItemMessageA WinHelpW GetCapture SetWindowsHookExW CallNextHookEx GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW SetFocus GetWindowTextLengthW GetWindowTextW GetForegroundWindow GetLastActivePopup DispatchMessageW GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageW MapWindowPoints SetForegroundWindow IsWindowVisible UpdateWindow GetClientRect GetMenu PostMessageW CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW GetSysColor AdjustWindowRectEx ScreenToClient CopyRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW SetWindowLongW SetWindowPos RegisterWindowMessageW SystemParametersInfoA IsIconic GetWindowPlacement GetWindow GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu GetActiveWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamW DestroyWindow IsWindow GetWindowLongW GetDlgItem IsWindowEnabled GetNextDlgTabItem EndDialog MessageBoxW GetDesktopWindow GetWindowRect LoadIconW GetParent GetKeyState SendMessageW EnableWindow GetFocus UnregisterClassA

gdi32

DeleteDC GetStockObject EnumFontFamiliesExW ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutW TextOutW RectVisible GetDeviceCaps DeleteObject SetMapMode RestoreDC SaveDC CreateBitmap GetObjectW SetBkColor SetTextColor GetClipBox PtVisible

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter

advapi32

RegQueryValueW RegEnumKeyW RegDeleteKeyW RegOpenKeyW RegCloseKey RegOpenKeyExA RegQueryValueExA RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegEnumKeyExW RegQueryValueExW

shell32

SHBindToParent SHGetDesktopFolder SHBrowseForFolderW SHGetSpecialFolderLocation SHGetPathFromIDListW

comctl32

ord17

shlwapi

StrRetToBufW PathStripToRootW PathFindExtensionW PathIsUNCW PathFindFileNameW

ole32

CoInitialize CoTaskMemFree CoUninitialize

oleaut32

SysAllocStringLen SysFreeString VariantClear VariantChangeType VariantInit

msi

ord173 ord70

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-12_40c22c2654924e06fb03e0271e45cd4a_amadey_elex_emotet_smoke-loader_stop

mpr

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

msi

generic