2026-07-06_73f3e6bae5949e984b10f446b386cc08_amadey_bangat_darkgate_elex_luca-stealer_lynx_magniber_njrat

General

Target
2026-07-06_73f3e6bae5949e984b10f446b386cc08_amadey_bangat_darkgate_elex_luca-stealer_lynx_magniber_njrat
Size 2.8MB
Sample260706-pw2c8abs4n
SHA256 c5dcd6c9dbf1b36cd0658c28d1684b770f708372d6bf8aa8cbf8d771cdc941c2
MD5 73f3e6bae5949e984b10f446b386cc08
SHA1 0cd85426af01386841dc891b91d5be49c27d40f7
SHA512 3a533a7503842a5da735c7e9d3232e7ee2031f3dafdca2af016dff88516da21ef03e76da769f99ca62ec1d8d9abac6a8af8776d720d2a51baaa90c9f426d85d6
SSDEEP 49152:LqB9G7PJMpQizHvJkkCzgZKUxT2gWEDmg27RnWGj:ObG7cHqzgDx2qD527BWG
TLSH
T140D5D012E2818138C4E161702C7DD7BD2B3AFC38AFA6159B73E4BB3559715C0AE35B29
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-06_73f3e6bae5949e984b10f446b386cc08_amadey_bangat_darkgate_elex_luca-stealer_lynx_magniber_njrat

File Explorer

2026-07-06_73f3e6bae5949e984b10f446b386cc08_amadey_bangat_darkgate_elex_luca-stealer_lynx_magniber_njrat

.exe 2.8MB

2026-07-06_73f3e6bae5949e984b10f446b386cc08_amadey_bangat_darkgate_elex_luca-stealer_lynx_magniber_njrat

IMPHASH e59e2176b6396e3a4c2c408e3cff4347
SHA256 c5dcd6c9dbf1b36cd0658c28d1684b770f708372d6bf8aa8cbf8d771cdc941c2
MD5 73f3e6bae5949e984b10f446b386cc08
SHA1 0cd85426af01386841dc891b91d5be49c27d40f7
SHA512 3a533a7503842a5da735c7e9d3232e7ee2031f3dafdca2af016dff88516da21ef03e76da769f99ca62ec1d8d9abac6a8af8776d720d2a51baaa90c9f426d85d6
SSDEEP 49152:LqB9G7PJMpQizHvJkkCzgZKUxT2gWEDmg27RnWGj:ObG7cHqzgDx2qD527BWG
TLSH
T140D5D012E2818138C4E161702C7DD7BD2B3AFC38AFA6159B73E4BB3559715C0AE35B29
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

438287

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Jenkins\workspace\MBAM-Windows\N_MB5Uns\bin\Win32\Release\mb5uns.pdb

kernel32

LoadResource FindResourceW FindResourceExW LeaveCriticalSection EnterCriticalSection GetCurrentThreadId SetLastError RaiseException DeleteCriticalSection GetLastError InitializeCriticalSectionEx LocalFree FormatMessageW LocalAlloc Sleep CallNamedPipeW FreeLibrary GetProcAddress GetModuleHandleW lstrcmpiW MultiByteToWideChar LoadLibraryExW GetModuleFileNameW GetWindowsDirectoryW SetCurrentDirectoryW CreateMutexW DecodePointer LockResource GlobalAlloc GlobalLock GlobalFree LoadLibraryW VerifyVersionInfoW VerSetConditionMask SetThreadUILanguage GetSystemDirectoryW GetCurrentProcessId CreateToolhelp32Snapshot Process32FirstW Process32NextW CloseHandle OpenProcess K32GetModuleFileNameExA WaitForSingleObject GetExitCodeProcess GetModuleFileNameA GetTickCount OutputDebugStringW GetLocalTime CreateFileW GetSystemTimeAsFileTime WriteConsoleW SetStdHandle SetEnvironmentVariableW SizeofResource GetProcessHeap HeapAlloc HeapFree HeapReAlloc HeapSize HeapDestroy WideCharToMultiByte MulDiv FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage GetTimeZoneInformation ReadConsoleW EnumSystemLocalesW GetUserDefaultLCID GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA FormatMessageA GetStringTypeW FindClose FindFirstFileExW FindNextFileW GetFileAttributesW GetTempPathW AreFileApisANSI GetLocaleInfoEx ReleaseSRWLockExclusive AcquireSRWLockExclusive EncodePointer LCMapStringEx QueryPerformanceCounter GetCPInfo IsDebuggerPresent InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList GetCurrentProcess FlushInstructionCache IsProcessorFeaturePresent VirtualAlloc VirtualFree WakeAllConditionVariable SleepConditionVariableSRW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess GetStartupInfoW RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetCommandLineA GetCommandLineW ExitProcess GetModuleHandleExW GetStdHandle WriteFile GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx ReadFile GetFileSizeEx GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale SetEndOfFile

dwmapi

DwmGetWindowAttribute

crypt32

CryptMsgClose CertCloseStore CertFreeCertificateContext CertGetNameStringW CertFindCertificateInStore CryptMsgGetParam CryptQueryObject CryptStringToBinaryA

bcrypt

BCryptGenerateSymmetricKey BCryptDestroyKey BCryptFinishHash BCryptDecrypt BCryptCreateHash BCryptOpenAlgorithmProvider BCryptCloseAlgorithmProvider BCryptDestroyHash BCryptHashData

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-06_73f3e6bae5949e984b10f446b386cc08_amadey_bangat_darkgate_elex_luca-stealer_lynx_magniber_njrat

kernel32

dwmapi

crypt32

bcrypt

generic