2026-07-11_87adafe4d03127a36112c33901958684_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_magniber_medusalocker_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-11_87adafe4d03127a36112c33901958684_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_magniber_medusalocker_njrat
Size 2.1MB
Sample260711-e1t5labv8q
SHA256 222949402d8131671c97e3a4dcf45bcb9b721a368dff0cf523fd824fae2db0ef
MD5 87adafe4d03127a36112c33901958684
SHA1 33e8ae86bc3985dc068d4e2a448d373b44a293cf
SHA512 b93227e1d3721b00fdbc7eb4e37afada51293cb9630339a48e4af1f9cfb394dde485790eb17a5b76d58095928891118e0d27b429097a5e7c23d33d7dd1d73f03
SSDEEP 49152:QSWnjI+y9VtlzwiUdoDcvXYfjTxFX+Jx1JYHD3rsRmxM:Q6TzwiuoDcvXUX05ey
TLSH
T195A57C217685C131E1622671596CFB7A81ADBE340F3045CFB7803B2EAA706D36E35E67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-11_87adafe4d03127a36112c33901958684_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_magniber_medusalocker_njrat

File Explorer

2026-07-11_87adafe4d03127a36112c33901958684_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_magniber_medusalocker_njrat

.exe 2.1MB

2026-07-11_87adafe4d03127a36112c33901958684_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_magniber_medusalocker_njrat

IMPHASH d79f3a547a93924ec4fa288b91858773
SHA256 222949402d8131671c97e3a4dcf45bcb9b721a368dff0cf523fd824fae2db0ef
MD5 87adafe4d03127a36112c33901958684
SHA1 33e8ae86bc3985dc068d4e2a448d373b44a293cf
SHA512 b93227e1d3721b00fdbc7eb4e37afada51293cb9630339a48e4af1f9cfb394dde485790eb17a5b76d58095928891118e0d27b429097a5e7c23d33d7dd1d73f03
SSDEEP 49152:QSWnjI+y9VtlzwiUdoDcvXYfjTxFX+Jx1JYHD3rsRmxM:Q6TzwiuoDcvXUX05ey
TLSH
T195A57C217685C131E1622671596CFB7A81ADBE340F3045CFB7803B2EAA706D36E35E67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

597340

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\jenkins\workspace\Storage-Bin\Build\dlc\storage-test\Win32\Storage.pdb

powrprof

PowerGetActiveScheme PowerWriteACValueIndex PowerWriteDCValueIndex PowerReadFriendlyName PowerDeleteScheme PowerDuplicateScheme PowerWriteFriendlyName PowerSetActiveScheme

mpr

WNetAddConnection2W WNetGetUniversalNameW

winmm

timeBeginPeriod timeGetTime timeEndPeriod

kernel32

EnumSystemLocalesW GetUserDefaultLCID GetFileAttributesW GetLastError LocalFree Sleep ReadFile WriteFile DeviceIoControl CreateFileW GetTickCount64 QueryPerformanceFrequency CloseHandle GetOverlappedResult QueryPerformanceCounter CreateEventW CreateDirectoryW GetFileSizeEx GetDiskFreeSpaceW SetConsoleCtrlHandler DeleteFileW SetFilePointerEx FlushFileBuffers GetCurrentProcess LoadLibraryW GetProcAddress FindFirstFileW FindClose GetSystemTime GetVolumeInformationW SetPriorityClass GetVolumePathNameW GetPriorityClass SetThreadExecutionState FreeLibrary CreateFileA IsValidLocale GetTimeFormatW GetDateFormatW GetConsoleMode ReadConsoleW GetTimeZoneInformation IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle HeapReAlloc HeapSize GetDiskFreeSpaceExW GetCurrentDirectoryW GetConsoleOutputCP HeapAlloc EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx GetModuleHandleW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead MultiByteToWideChar FormatMessageA GetStringTypeW WideCharToMultiByte SwitchToThread GetExitCodeThread GetNativeSystemInfo TryEnterCriticalSection SetCurrentDirectoryW RtlCaptureStackBackTrace FindFirstFileExW FindNextFileW GetFileAttributesExW GetFileInformationByHandle GetFullPathNameW RemoveDirectoryW SetEndOfFile SetFileAttributesW SetFileTime GetTempPathW AreFileApisANSI SetLastError CreateDirectoryExW CopyFileW MoveFileExW CreateHardLinkW EncodePointer DecodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetTickCount CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList OutputDebugStringW GetCurrentThread GetThreadTimes FreeLibraryAndExitThread GetModuleFileNameW GetModuleHandleA LoadLibraryExW CreateTimerQueue SignalObjectAndWait CreateThread SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait DuplicateHandle ReleaseSemaphore UnregisterWaitEx GetVersionExW VirtualAlloc VirtualProtect VirtualFree SetProcessAffinityMask WaitForMultipleObjectsEx WaitForSingleObject RtlUnwind RaiseException GetStdHandle GetFileType GetModuleHandleExW WriteConsoleW ExitThread ResumeThread ExitProcess GetCommandLineA GetCommandLineW HeapFree

user32

SendInput wsprintfW

advapi32

CloseServiceHandle OpenSCManagerW ControlService OpenServiceW QueryServiceStatusEx LookupPrivilegeValueW AdjustTokenPrivileges OpenProcessToken RegCloseKey RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegQueryValueExW

shell32

SHFileOperationW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-11_87adafe4d03127a36112c33901958684_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_magniber_medusalocker_njrat

powrprof

mpr

winmm

kernel32

user32

advapi32

shell32

generic