2026-06-25_3f5b17710c86600db5927af24931ff7c_amadey_elex_luca-stealer_magniber_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-25_3f5b17710c86600db5927af24931ff7c_amadey_elex_luca-stealer_magniber_njrat
Size 1.4MB
Sample260629-2txcpsas2p
SHA256 330ae63aa19c7472c9751e85069e443bba19044dae14cf93b2179bdc02e98723
MD5 3f5b17710c86600db5927af24931ff7c
SHA1 3a4484ded99c3ac322f9c9d18e25e033aeb0d317
SHA512 7eb073e6bc97daebdd0e02c95a7230b4f6bf791033d074c75246357598082ca295f9f1e2b45d495b6af2b6329b6e3d330b81985f4cc39c874939f9c012f0a8e6
SSDEEP 24576:TWHpbl63RqxE6DUzvceW79zEBMhB/kYvwpZfmmxXWwsqjnhMgeiCl7G0nehbGZpv:TWHy3RqxE64A79zE2CYvwpZeqDmg27RN
TLSH
T15465C02139C18233C673E57209A4FA74996DB8311E319ACF67841B3EAF705D15E26A3F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-25_3f5b17710c86600db5927af24931ff7c_amadey_elex_luca-stealer_magniber_njrat

File Explorer

2026-06-25_3f5b17710c86600db5927af24931ff7c_amadey_elex_luca-stealer_magniber_njrat

.exe 1.4MB

2026-06-25_3f5b17710c86600db5927af24931ff7c_amadey_elex_luca-stealer_magniber_njrat

IMPHASH cf9549576bd09c2866bf07120782839b
SHA256 330ae63aa19c7472c9751e85069e443bba19044dae14cf93b2179bdc02e98723
MD5 3f5b17710c86600db5927af24931ff7c
SHA1 3a4484ded99c3ac322f9c9d18e25e033aeb0d317
SHA512 7eb073e6bc97daebdd0e02c95a7230b4f6bf791033d074c75246357598082ca295f9f1e2b45d495b6af2b6329b6e3d330b81985f4cc39c874939f9c012f0a8e6
SSDEEP 24576:TWHpbl63RqxE6DUzvceW79zEBMhB/kYvwpZfmmxXWwsqjnhMgeiCl7G0nehbGZpv:TWHy3RqxE64A79zE2CYvwpZeqDmg27RN
TLSH
T15465C02139C18233C673E57209A4FA74996DB8311E319ACF67841B3EAF705D15E26A3F
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

279958

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\thunder_thirdparty\XLBugReport_VS2019\XLBugReport\bin\Release\XLBugReport.pdb

dbghelp

MiniDumpReadDumpStream

ws2_32

connect htons inet_addr recv send closesocket getsockname setsockopt socket gethostbyname WSAStartup WSACleanup WSAAsyncGetHostByName getpeername WSACancelAsyncRequest ntohs WSAAsyncSelect WSAGetLastError

minizip

zipWriteInFileInZip zipCloseFileInZip zipClose zipOpenNewFileInZip zipOpen

libeay32

ord197 ord196 ord1804 ord464

libcurl

curl_slist_append curl_global_cleanup curl_global_init curl_easy_getinfo curl_easy_cleanup curl_easy_perform curl_easy_setopt curl_easy_init

kernel32

FreeLibraryAndExitThread ResumeThread ExitThread FileTimeToSystemTime PeekNamedPipe CreateFileW CloseHandle RaiseException CreateFileMappingW MapViewOfFile MultiByteToWideChar WideCharToMultiByte DeleteFileW FindClose FindFirstFileW FindNextFileW GetTempPathW GetLastError HeapDestroy HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection WaitForSingleObject GetExitCodeProcess GetSystemTime FindResourceExW LoadResource LockResource SizeofResource FindResourceW CopyFileW SystemTimeToTzSpecificLocalTime DecodePointer InitializeCriticalSection CreateThread GetCurrentThreadId TerminateThread GetModuleFileNameA OutputDebugStringW SetLastError SetErrorMode FreeLibrary GetModuleFileNameW GetModuleHandleW GetProcAddress LoadLibraryExW ExitProcess GlobalUnlock GlobalLock lstrcmpiW GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW FileTimeToLocalFileTime ReadFile FileTimeToDosDateTime InitializeCriticalSectionEx IsBadCodePtr SetFileTime WriteFile MoveFileW SystemTimeToFileTime GetFileAttributesExW GetFileSizeEx FormatMessageW GetCPInfo GetStringTypeW GetLocaleInfoW LCMapStringW CompareStringW GetTickCount GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc SwitchToThread CreateEventW LocalFree FormatMessageA LoadLibraryExA VirtualFree VirtualAlloc IsProcessorFeaturePresent FlushInstructionCache GetCurrentProcess InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead WaitForSingleObjectEx EncodePointer IsDebuggerPresent GetStdHandle GetCurrentThread UnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId RtlUnwind InterlockedFlushSList GetDriveTypeW GetFileInformationByHandle SetUnhandledExceptionFilter TerminateProcess SetEvent ResetEvent GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetTimeZoneInformation GetConsoleMode ReadConsoleW SetCurrentDirectoryW GetCurrentDirectoryW GetModuleHandleExW GetFullPathNameW SetStdHandle GetConsoleCP SetFilePointerEx SetConsoleCtrlHandler FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW GetFileType FreeEnvironmentStringsW SetEnvironmentVariableW FlushFileBuffers SetEndOfFile GlobalAlloc WriteConsoleW

user32

MessageBeep MessageBoxW GetWindowRect GetClientRect GetWindowTextLengthW GetWindowTextW SetCursor GetCursorPos MapWindowPoints GetSysColor InflateRect SetWindowTextW InvalidateRect EndPaint BeginPaint ReleaseDC GetDC DrawTextW LoadCursorW LoadImageW SystemParametersInfoW GetDesktopWindow MonitorFromWindow GetWindowLongW SetWindowLongW GetParent GetWindow ShowCursor GetSystemMetrics IsWindowEnabled KillTimer SetTimer GetActiveWindow EmptyClipboard SetClipboardData CloseClipboard OpenClipboard SetDlgItemTextW GetDlgItem EndDialog DialogBoxParamW SetWindowPos ShowWindow DestroyWindow IsWindow CallWindowProcW DefWindowProcW SendMessageW PostThreadMessageW PeekMessageW UnregisterClassW PostQuitMessage DispatchMessageW TranslateMessage GetMessageW wsprintfW GetMonitorInfoW PostMessageW RegisterClassExW GetClassInfoExW CreateWindowExW LoadBitmapW CharNextW

gdi32

OffsetWindowOrgEx SetWindowOrgEx ExtTextOutW GetObjectW SetTextColor SetBkMode SetBkColor SelectObject ExtSelectClipRgn Rectangle GetWindowOrgEx GetStockObject BitBlt CreateCompatibleDC CreateFontIndirectW CreateRectRgnIndirect DeleteObject DeleteDC

advapi32

TraceEvent RegCreateKeyExW RegDeleteKeyW RegDeleteValueW GetTraceEnableLevel GetTraceLoggerHandle UnregisterTraceGuids RegisterTraceGuidsW RegSetValueExW RegQueryInfoKeyW RegOpenKeyExW RegEnumKeyExW RegCloseKey

shell32

ShellExecuteW SHCreateDirectoryExW ord165 ShellExecuteExW

ole32

CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree CoInitialize CoCreateInstance CoUninitialize

oleaut32

VarUI4FromStr SysFreeString SysAllocStringLen SysAllocString VariantClear

shlwapi

PathFileExistsW PathCombineA PathAppendW

comctl32

_TrackMouseEvent InitCommonControlsEx

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-25_3f5b17710c86600db5927af24931ff7c_amadey_elex_luca-stealer_magniber_njrat

dbghelp

ws2_32

minizip

libeay32

libcurl

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

generic