2026-05-28_4dd7736a2299c8962b6b6116e2053ebf_amadey_darkgate_elex_luca-stealer_lynx_njrat

General

Target
2026-05-28_4dd7736a2299c8962b6b6116e2053ebf_amadey_darkgate_elex_luca-stealer_lynx_njrat
Size 1.4MB
Sample260528-e4cpqagy9x
SHA256 6456de0b6fe97ef4e604c77dd41ec3551a8e5cbc226c3de4389f8e6578c92b46
MD5 4dd7736a2299c8962b6b6116e2053ebf
SHA1 69b4e516559aaac6585f7e1e92e4ba54381fab77
SHA512 0a49b22cba83fcbba53f21bdb1db0496ac7b8648c9cb2bc695b81a888516e3dec06cca8aad163a13dc9b91172a3e8aecdfe49e116537d5c843b86680de07a6cc
SSDEEP 24576:qfELZc0z1wCj/pZUbzjS3e09rDIeAtjXzHGL8vPlh0lhSMXlvUanQ/tbw/2Mkjy+:UKlsGIvUflQ/lFTjN4
TLSH
T1C265C033B614C839FA5070B44EB99EEE553E5D28475C85C717D93E6A8EB00D27E3A20B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-28_4dd7736a2299c8962b6b6116e2053ebf_amadey_darkgate_elex_luca-stealer_lynx_njrat

File Explorer

2026-05-28_4dd7736a2299c8962b6b6116e2053ebf_amadey_darkgate_elex_luca-stealer_lynx_njrat

.exe 1.4MB

2026-05-28_4dd7736a2299c8962b6b6116e2053ebf_amadey_darkgate_elex_luca-stealer_lynx_njrat

IMPHASH 214fcd0ed36a4dafb3311f6844781bfb
SHA256 6456de0b6fe97ef4e604c77dd41ec3551a8e5cbc226c3de4389f8e6578c92b46
MD5 4dd7736a2299c8962b6b6116e2053ebf
SHA1 69b4e516559aaac6585f7e1e92e4ba54381fab77
SHA512 0a49b22cba83fcbba53f21bdb1db0496ac7b8648c9cb2bc695b81a888516e3dec06cca8aad163a13dc9b91172a3e8aecdfe49e116537d5c843b86680de07a6cc
SSDEEP 24576:qfELZc0z1wCj/pZUbzjS3e09rDIeAtjXzHGL8vPlh0lhSMXlvUanQ/tbw/2Mkjy+:UKlsGIvUflQ/lFTjN4
TLSH
T1C265C033B614C839FA5070B44EB99EEE553E5D28475C85C717D93E6A8EB00D27E3A20B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

369253

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\JenkinsWorkspace\workspace\client_build_installer\client\build\working_directory\RelWithDebInfo\UplayWebCore.pdb

libcef

cef_string_utf16_clear cef_string_multimap_free cef_string_multimap_alloc cef_string_multimap_append cef_string_multimap_value cef_string_multimap_key cef_string_multimap_size cef_string_map_append cef_string_map_value cef_string_map_key cef_string_map_size cef_string_list_append cef_string_list_value cef_string_list_size cef_list_value_create cef_dictionary_value_create cef_v8_value_create_function cef_v8_value_create_array cef_v8_value_create_object cef_v8_value_create_string cef_v8_value_create_double cef_v8_value_create_int cef_v8_value_create_bool cef_v8_value_create_null cef_string_utf8_to_utf16 cef_string_utf16_cmp cef_string_utf8_clear cef_string_utf16_to_utf8 cef_string_userfree_utf16_free cef_string_list_alloc cef_v8_context_get_current_context cef_process_message_create cef_log cef_command_line_create cef_string_map_free cef_string_map_alloc cef_get_min_log_level cef_execute_process cef_api_hash cef_string_list_free cef_string_utf16_set

rpcrt4

UuidCreate RpcStringFreeA UuidToStringA

kernel32

WriteFile GetStdHandle GetFileType LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc RtlUnwind GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead QueryPerformanceCounter IsProcessorFeaturePresent GetStringTypeW GetCPInfo LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx FindFirstFileExW HeapReAlloc GetSystemTimeAsFileTime TerminateProcess DeleteCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection InitializeCriticalSection MultiByteToWideChar SetLastError GetModuleFileNameW SetFilePointerEx FindNextFileW FindClose GetLocaleInfoW WideCharToMultiByte FormatMessageW GetProcAddress GetModuleHandleExW GetModuleFileNameA RaiseException GetCurrentThreadId ExitProcess GetCurrentProcessId GetCurrentProcess GetProcessHeap HeapFree HeapAlloc GetLastError CloseHandle DebugBreak CreateFileW LCMapStringW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetStdHandle IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW HeapSize WriteConsoleW GetCommandLineW GetModuleHandleW

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-28_4dd7736a2299c8962b6b6116e2053ebf_amadey_darkgate_elex_luca-stealer_lynx_njrat

libcef

rpcrt4

kernel32

generic