2026-07-09_25045c264e92c9b1a93084a8d8c9e8dc_amadey_darkgate_elex_hellokitty_luca-stealer_lynx_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-09_25045c264e92c9b1a93084a8d8c9e8dc_amadey_darkgate_elex_hellokitty_luca-stealer_lynx_njrat_smoke-loader
Size 1.6MB
Sample260709-cvdvbacy7t
SHA256 f0010c7e2ad3563252bf11473fe59458fa4874b3a053ee6cfc0e2e454a1d6af3
MD5 25045c264e92c9b1a93084a8d8c9e8dc
SHA1 51460cd9f44086158031695aa02e94d9a05cc1d4
SHA512 26624cf0d334070f668219b942a20e3bd73d60bcbaef642375b271fe7bdac903fecf4d7638c9c27b511b14cca6b0e9d2ed8a88eadb5118a07c9fd624decc1056
SSDEEP 24576:Q+8DOeatY00qinBToNiSnnrFb4PM4MYgLxEVyGLB:Q+ZeayhqiJoNdj4MYPVyGLB
TLSH
T1FB75E02176E18072E9F72A3018B4A7B55A3EBD305E34D59FA394167E5E31AC0CA31B37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-09_25045c264e92c9b1a93084a8d8c9e8dc_amadey_darkgate_elex_hellokitty_luca-stealer_lynx_njrat_smoke-loader

File Explorer

2026-07-09_25045c264e92c9b1a93084a8d8c9e8dc_amadey_darkgate_elex_hellokitty_luca-stealer_lynx_njrat_smoke-loader

.exe 1.6MB

2026-07-09_25045c264e92c9b1a93084a8d8c9e8dc_amadey_darkgate_elex_hellokitty_luca-stealer_lynx_njrat_smoke-loader

IMPHASH 9dce7b925f437cdffe96b118cf300138
SHA256 f0010c7e2ad3563252bf11473fe59458fa4874b3a053ee6cfc0e2e454a1d6af3
MD5 25045c264e92c9b1a93084a8d8c9e8dc
SHA1 51460cd9f44086158031695aa02e94d9a05cc1d4
SHA512 26624cf0d334070f668219b942a20e3bd73d60bcbaef642375b271fe7bdac903fecf4d7638c9c27b511b14cca6b0e9d2ed8a88eadb5118a07c9fd624decc1056
SSDEEP 24576:Q+8DOeatY00qinBToNiSnnrFb4PM4MYgLxEVyGLB:Q+ZeayhqiJoNdj4MYPVyGLB
TLSH
T1FB75E02176E18072E9F72A3018B4A7B55A3EBD305E34D59FA394167E5E31AC0CA31B37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

26196

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\a\1\s\psgetsid\exe\Win32\Release\PsGetsid.pdb

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoA GetFileVersionInfoW VerQueryValueA GetFileVersionInfoSizeA

netapi32

NetApiBufferFree NetServerEnum

ws2_32

WSAStartup gethostname inet_ntoa gethostbyname

mpr

WNetCancelConnection2A WNetAddConnection2A

kernel32

WaitForSingleObject Sleep GetCurrentProcess GetTickCount GetSystemDirectoryA FreeLibrary LoadResource CloseHandle DeleteFileA FormatMessageA FindResourceA VerifyVersionInfoA WideCharToMultiByte GetConsoleScreenBufferInfo lstrcpyA lstrlenA ReadFile GetFileSizeEx LockResource WriteFile CreateFileA VerSetConditionMask GetModuleFileNameW GetModuleFileNameA LocalFree LocalAlloc GetProcAddress GetModuleHandleA GetFileType GetCommandLineW GetStdHandle LoadLibraryExA GetVersionExA SetLastError GetComputerNameA GetLastError SetFilePointerEx HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetEndOfFile HeapSize WriteConsoleW SizeofResource RaiseException GetSystemInfo VirtualProtect VirtualQuery GetModuleHandleW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar GetStringTypeW GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetConsoleCP ExitProcess GetModuleHandleExW SetStdHandle CreateThread ExitThread FreeLibraryAndExitThread GetCommandLineA HeapAlloc HeapFree CompareStringW LCMapStringW FlushFileBuffers GetConsoleOutputCP GetConsoleMode CreateFileW SetConsoleMode ReadConsoleInputW ReadConsoleW

comdlg32

PrintDlgA

advapi32

LsaNtStatusToWinError LookupAccountNameA LookupAccountSidA LsaQueryInformationPolicy LsaOpenPolicy LsaClose IsValidSid InitializeSid GetSidSubAuthorityCount GetSidSubAuthority GetSidLengthRequired GetSidIdentifierAuthority StartServiceA QueryServiceStatus OpenServiceA OpenSCManagerA DeleteService CreateServiceA ControlService CloseServiceHandle RegSetValueExA RegQueryValueExW RegQueryValueExA RegOpenKeyExA RegOpenKeyA RegCreateKeyA RegCloseKey

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-09_25045c264e92c9b1a93084a8d8c9e8dc_amadey_darkgate_elex_hellokitty_luca-stealer_lynx_njrat_smoke-loader

version

netapi32

ws2_32

mpr

kernel32

comdlg32

advapi32

generic