2026-05-11_2120f212ea656aca1a97f19528eeb583_amadey_darkgate_elex_luca-stealer_njrat_play

Sharing

Copy URL Twitter E-mail

General

Target
2026-05-11_2120f212ea656aca1a97f19528eeb583_amadey_darkgate_elex_luca-stealer_njrat_play
Size 4.8MB
Sample260511-p8dgxsav2x
SHA256 35a56aacdf76050c895c1989e5686bd006cfffc871f3c56d8565190a8e1048f6
MD5 2120f212ea656aca1a97f19528eeb583
SHA1 458c87b76544cf608d336493f44a0096d3e6f33d
SHA512 394f53fa200aef1effb4ef4c0344810648354215bbb787ad5dc444d5fd75a8be3613e7956b2577959be11210362b013322b953adf7374223b198ace4d9a7b4fd
SSDEEP 98304:+2z55DSxIED25fumsCBmINVWyTBKDfAl4m:+s5LTur8mLzfAl4
TLSH
T1DE36E0C1EC03D153D3794131602582FDFC657A1CEB66987E31A4D976A62AFF8A0A87C3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-11_2120f212ea656aca1a97f19528eeb583_amadey_darkgate_elex_luca-stealer_njrat_play

File Explorer

2026-05-11_2120f212ea656aca1a97f19528eeb583_amadey_darkgate_elex_luca-stealer_njrat_play

.exe 4.8MB

2026-05-11_2120f212ea656aca1a97f19528eeb583_amadey_darkgate_elex_luca-stealer_njrat_play

IMPHASH 0c3b09a5aa2b5d310c0a40c3058c2026
SHA256 35a56aacdf76050c895c1989e5686bd006cfffc871f3c56d8565190a8e1048f6
MD5 2120f212ea656aca1a97f19528eeb583
SHA1 458c87b76544cf608d336493f44a0096d3e6f33d
SHA512 394f53fa200aef1effb4ef4c0344810648354215bbb787ad5dc444d5fd75a8be3613e7956b2577959be11210362b013322b953adf7374223b198ace4d9a7b4fd
SSDEEP 98304:+2z55DSxIED25fumsCBmINVWyTBKDfAl4m:+s5LTur8mLzfAl4
TLSH
T1DE36E0C1EC03D153D3794131602582FDFC657A1CEB66987E31A4D976A62AFF8A0A87C3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

107183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LockResource LoadResource FindResourceW GetTickCount LoadLibraryW GetProcAddress FreeLibrary CreateDirectoryW SetLastError GetCommandLineW FindNextFileW GetCurrentProcess FindClose MultiByteToWideChar GlobalFlags GetSystemInfo GetCurrentDirectoryW SetCurrentDirectoryW CreateProcessW WideCharToMultiByte VirtualQuery SetEvent CreateThread ResetEvent GetLocalTime GetSystemTimeAsFileTime InitializeCriticalSection LoadLibraryExW WriteConsoleW FlushFileBuffers GetStringTypeW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW LCMapStringW GetConsoleMode GetConsoleOutputCP GetFileType SetFilePointerEx GetStdHandle GetCommandLineA GetModuleHandleExW TlsFree TlsSetValue TlsGetValue TlsAlloc EncodePointer RtlUnwind InitializeSListHead QueryPerformanceCounter GetStartupInfoW IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter WaitForSingleObjectEx OutputDebugStringW SizeofResource MulDiv GlobalUnlock GlobalLock GlobalFree GlobalAlloc TryEnterCriticalSection GetProcessHandleCount TerminateProcess HeapFree OpenProcess GetCurrentProcessId WriteFile EnterCriticalSection LeaveCriticalSection GetCurrentThreadId GetModuleHandleW IsDebuggerPresent CreateEventW GetModuleFileNameW Sleep CloseHandle FreeResource CreateFileW ExitProcess GetProcessHeap DeleteCriticalSection DecodePointer HeapAlloc RaiseException HeapReAlloc GetLastError HeapSize InitializeCriticalSectionAndSpinCount lstrcmpiW

user32

GetMessageW TranslateMessage DispatchMessageW ReleaseDC DestroyWindow MessageBoxW PeekMessageW DefWindowProcW CharNextW MonitorFromWindow GetDC LoadImageW GetParent GetDesktopWindow LoadCursorW LoadIconW LoadStringW SendMessageW GetWindowLongW WaitForInputIdle

gdi32

CreateDIBSection CreateCompatibleDC GetDeviceCaps GetObjectW DeleteObject SelectObject SetDIBColorTable DeleteDC

advapi32

RegQueryInfoKeyW RegDeleteKeyW RegEnumKeyExW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegOpenKeyExW

shell32

ShellExecuteW SHGetSpecialFolderPathW

ole32

CoTaskMemRealloc CoTaskMemFree CoTaskMemAlloc CoCreateInstance CoInitializeEx CoUninitialize CreateStreamOnHGlobal

oleaut32

SystemTimeToVariantTime VariantTimeToSystemTime VarUI4FromStr

comctl32

ImageList_AddMasked InitCommonControlsEx ImageList_Create ImageList_Destroy

ws2_32

WSACleanup

gdiplus

GdipGetImageHeight GdipGetImagePaletteSize GdipCloneImage GdipBitmapUnlockBits GdipCreateBitmapFromStream GdipAlloc GdipDrawImageRectI GdipDisposeImage GdiplusStartup GdipBitmapLockBits GdipGetImageGraphicsContext GdipDeleteGraphics GdipGetImagePalette GdipSetCompositingMode GdipGetImagePixelFormat GdipCreateBitmapFromFile GdipCreateBitmapFromScan0 GdiplusShutdown GdipFree GdipGetImageWidth

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-11_2120f212ea656aca1a97f19528eeb583_amadey_darkgate_elex_luca-stealer_njrat_play

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

gdiplus

generic