2026-06-29_c83a67b1c4390fd375bf2d78da8adfa3_amadey_darkgate_elex_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader

General

Target
2026-06-29_c83a67b1c4390fd375bf2d78da8adfa3_amadey_darkgate_elex_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
Size 3.4MB
Sample260630-d775cset9q
SHA256 00e2b52214d202b053ef38497b04b183e0d608580de43688cceab88c9f314eb1
MD5 c83a67b1c4390fd375bf2d78da8adfa3
SHA1 3e35c4233ef52a3fc9056f43dc310df599486731
SHA512 d1e9d86bb3a30dd5c31dbd79384dc80e586350c26fbd2af04b5792867433ce3219ec9d673cf2379770d23429314bf3fed4f2ba0537be190a48340700ef7597c3
SSDEEP 49152:3rkwWbXsPNIULkmp1/j6AeXZFKKe1YeEAYOW1+M5A83M+svqiaP:bkfbXsPN5kiDKsW1+M5NX
TLSH
T18DF55C2176D58729F5B302B169B85AB6843FBD340F7985CF67802E1B2570BC25A36F23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-29_c83a67b1c4390fd375bf2d78da8adfa3_amadey_darkgate_elex_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader

2026-06-29_c83a67b1c4390fd375bf2d78da8adfa3_amadey_darkgate_elex_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader

.exe 3.4MB

IMPHASH 8613ef930607533a0d5c58f82e848384
SHA256 00e2b52214d202b053ef38497b04b183e0d608580de43688cceab88c9f314eb1
MD5 c83a67b1c4390fd375bf2d78da8adfa3
SHA1 3e35c4233ef52a3fc9056f43dc310df599486731
SHA512 d1e9d86bb3a30dd5c31dbd79384dc80e586350c26fbd2af04b5792867433ce3219ec9d673cf2379770d23429314bf3fed4f2ba0537be190a48340700ef7597c3
SSDEEP 49152:3rkwWbXsPNIULkmp1/j6AeXZFKKe1YeEAYOW1+M5A83M+svqiaP:bkfbXsPN5kiDKsW1+M5NX
TLSH
T18DF55C2176D58729F5B302B169B85AB6843FBD340F7985CF67802E1B2570BC25A36F23
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths