2026-05-27_f68af5fa4ea3ee5a9158d710bc0d4070_amadey_darkgate_elex_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-05-27_f68af5fa4ea3ee5a9158d710bc0d4070_amadey_darkgate_elex_luca-stealer_lynx_njrat
Size 1.7MB
Sample260527-tm2pvaby3q
SHA256 bb2f560b9af0e9db2ad3e47f51236b84b5b34c832cc04d39ae24c20852087f5b
MD5 f68af5fa4ea3ee5a9158d710bc0d4070
SHA1 bbcb075a6ade3cf5b916055e29a244e098aadf8f
SHA512 ad1a37ca8cafd9a21aefea92f7a5ba9d427033fdb1e2a3925450878532aa6e7302935ef1e25688a05d93d8b725e894ad05b161f099ffdad3d3cedef097bd08ed
SSDEEP 24576:r3bn5Vzszm+nNhoZJyxd19eM5W+Ys7Uv+ahF8MlMPuuICiJSE:ENSZsxdKGft7Uv+MnIIC
TLSH
T11085CF2036A6CC3AE5E197358E79C6AB152D7E600F3354CB76C83A7B3C784C11B36666
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-27_f68af5fa4ea3ee5a9158d710bc0d4070_amadey_darkgate_elex_luca-stealer_lynx_njrat

File Explorer

2026-05-27_f68af5fa4ea3ee5a9158d710bc0d4070_amadey_darkgate_elex_luca-stealer_lynx_njrat

.exe 1.7MB

2026-05-27_f68af5fa4ea3ee5a9158d710bc0d4070_amadey_darkgate_elex_luca-stealer_lynx_njrat

IMPHASH 0ba7a1794810b1c7f931e9b1df12aaff
SHA256 bb2f560b9af0e9db2ad3e47f51236b84b5b34c832cc04d39ae24c20852087f5b
MD5 f68af5fa4ea3ee5a9158d710bc0d4070
SHA1 bbcb075a6ade3cf5b916055e29a244e098aadf8f
SHA512 ad1a37ca8cafd9a21aefea92f7a5ba9d427033fdb1e2a3925450878532aa6e7302935ef1e25688a05d93d8b725e894ad05b161f099ffdad3d3cedef097bd08ed
SSDEEP 24576:r3bn5Vzszm+nNhoZJyxd19eM5W+Ys7Uv+ahF8MlMPuuICiJSE:ENSZsxdKGft7Uv+MnIIC
TLSH
T11085CF2036A6CC3AE5E197358E79C6AB152D7E600F3354CB76C83A7B3C784C11B36666
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

210217

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wrk\prj\_Thesycon\USB\TUSBAudio\_main\bin\Release\Win32\tusbaudiocplapp.pdb

kernel32

GetCurrentProcess GetCurrentProcessId CreateThread GetCurrentThreadId SetThreadPriority GetLocalTime FreeLibrary GetModuleFileNameW GetProcAddress LoadLibraryW MoveFileW LCIDToLocaleName GetUserDefaultUILanguage GetLocaleInfoEx MultiByteToWideChar DebugBreak OutputDebugStringW DecodePointer RaiseException InitializeCriticalSectionEx CreateMutexW Sleep GetModuleHandleW LoadLibraryExW LoadResource SizeofResource FindResourceW lstrcmpiW lstrlenA lstrlenW SetLastError WaitForMultipleObjectsEx CreateEventW MulDiv SetEvent SetEndOfFile GetStringTypeW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP WaitForSingleObject IsValidCodePage EnterCriticalSection HeapReAlloc HeapSize LCMapStringW CompareStringW GetFileSizeEx ReadConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers GetFileType WriteFile GetStdHandle ExitProcess GetTimeZoneInformation GetModuleHandleExW FreeLibraryAndExitThread ExitThread ReadFile TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RtlUnwind LoadLibraryExA VirtualFree VirtualAlloc FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList WriteConsoleW GetProcessHeap HeapFree HeapAlloc EncodePointer InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter DeleteCriticalSection GetACP InitializeCriticalSection GetLastError SetUnhandledExceptionFilter CloseHandle OutputDebugStringA SetFileAttributesW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess UnhandledExceptionFilter LeaveCriticalSection CreateFileW CreateDirectoryW FindFirstFileExW ExpandEnvironmentStringsW

user32

PeekMessageW PostMessageW DispatchMessageW LoadStringW GetMessageW TranslateMessage DefWindowProcW ClientToScreen EndDialog CreateDialogParamW RegisterClassExW GetActiveWindow DialogBoxParamW SetTimer EnableWindow GetDlgCtrlID SetWindowTextW GetMonitorInfoW MonitorFromWindow MonitorFromPoint LoadImageW GetWindow MapWindowPoints GetCursorPos GetWindowRect GetClientRect RedrawWindow SetForegroundWindow TrackPopupMenu ModifyMenuW GetMenuItemCount GetMenuItemID GetSubMenu DestroyMenu LoadMenuW GetSystemMetrics GetDlgItem IsIconic IsWindowVisible MoveWindow IsWindow CreateWindowExW PostQuitMessage InvalidateRect UpdateWindow GetParent SetWindowLongW GetWindowLongW SetWindowPos UnregisterClassW CallWindowProcW SendMessageW GetWindowThreadProcessId FindWindowW MessageBoxW AllowSetForegroundWindow CharNextW ShowWindow DestroyWindow KillTimer

gdi32

DeleteObject

advapi32

RegOpenKeyExW RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegQueryInfoKeyW RegSetValueExW RegQueryValueExW RegCloseKey RegEnumKeyExW

shell32

Shell_NotifyIconW SHGetSpecialFolderPathW

ole32

CoTaskMemAlloc CoUninitialize CoTaskMemFree CoInitialize CoTaskMemRealloc CoCreateInstance

oleaut32

VarUI4FromStr

comctl32

DestroyPropertySheetPage InitCommonControlsEx PropertySheetW CreatePropertySheetPageW

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-27_f68af5fa4ea3ee5a9158d710bc0d4070_amadey_darkgate_elex_luca-stealer_lynx_njrat

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

generic