2026-06-04_82c59c11437f4be4ad5fc57ecc914345_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat

General

Target
2026-06-04_82c59c11437f4be4ad5fc57ecc914345_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat
Size 1.2MB
Sample260604-te6c3aaz7p
SHA256 75afe60ba4adf39f72da999b0854d3fc1e3bda4083ba3e8ba6b7c01a026045d5
MD5 82c59c11437f4be4ad5fc57ecc914345
SHA1 32368fee333c285404694c5b36999bbfe893da5f
SHA512 5f6f177cb84d0007d54d8b0d98f5ba200ea88fe46c39dcb9e23023bc32ada21ee0288d2c245f280ba3316eadebcecfbb7aad1afb9a4e5340c2823c01f3801537
SSDEEP 24576:zq1fObNlF3OsQaKZSqw7m9dgkEmXCYBOQ8QprdUHc0/T3iaV:TlgsQ7Xw7m9qkCqT8M2xz
TLSH
T18F45E131B283D13AC4B100F05D7CFB9A642EFD260B655EDBB3C85A395A741D21E31E6A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-04_82c59c11437f4be4ad5fc57ecc914345_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat

File Explorer

2026-06-04_82c59c11437f4be4ad5fc57ecc914345_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat

.exe 1.2MB

2026-06-04_82c59c11437f4be4ad5fc57ecc914345_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat

IMPHASH 992439cf5e9384747fa36dffa9dd3183
SHA256 75afe60ba4adf39f72da999b0854d3fc1e3bda4083ba3e8ba6b7c01a026045d5
MD5 82c59c11437f4be4ad5fc57ecc914345
SHA1 32368fee333c285404694c5b36999bbfe893da5f
SHA512 5f6f177cb84d0007d54d8b0d98f5ba200ea88fe46c39dcb9e23023bc32ada21ee0288d2c245f280ba3316eadebcecfbb7aad1afb9a4e5340c2823c01f3801537
SSDEEP 24576:zq1fObNlF3OsQaKZSqw7m9dgkEmXCYBOQ8QprdUHc0/T3iaV:TlgsQ7Xw7m9qkCqT8M2xz
TLSH
T18F45E131B283D13AC4B100F05D7CFB9A642EFD260B655EDBB3C85A395A741D21E31E6A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

330838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\tool\odin4\Release\odin4.pdb

setupapi

SetupDiGetDeviceRegistryPropertyA SetupDiEnumDeviceInfo SetupDiGetDeviceInstanceIdA SetupDiOpenDevRegKey SetupDiGetClassDevsA SetupDiDestroyDeviceInfoList

advapi32

RegCloseKey RegQueryValueExA

kernel32

SetStdHandle CreateFileW WriteConsoleW SetEndOfFile SetEnvironmentVariableW GetProcessHeap GetLastError ReadFile WriteFile PurgeComm WaitForSingleObject GetCommTimeouts SetupComm CreateFileA GetCommState CloseHandle ClearCommError GetOverlappedResult FormatMessageA CreateEventA SetCommTimeouts SetCommState QueryPerformanceCounter QueryPerformanceFrequency GetThreadTimes GetCurrentThread FreeEnvironmentStringsW WideCharToMultiByte WaitForSingleObjectEx Sleep SwitchToThread GetCurrentThreadId GetExitCodeThread EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress EncodePointer DecodePointer MultiByteToWideChar CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent SetEvent ResetEvent InitializeSListHead IsDebuggerPresent GetStartupInfoW GetCurrentProcessId CreateThread FreeLibrary FreeLibraryAndExitThread GetModuleFileNameW LoadLibraryExW InterlockedPushEntrySList RtlUnwind RaiseException ExitThread GetModuleHandleExW ExitProcess GetStdHandle GetCommandLineA GetCommandLineW HeapFree GetFileSizeEx SetFilePointerEx GetFileType HeapAlloc FlushFileBuffers GetConsoleCP GetConsoleMode IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadConsoleW HeapReAlloc HeapSize FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-04_82c59c11437f4be4ad5fc57ecc914345_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat

setupapi

advapi32

kernel32

generic