2026-07-14_e3d9d62193b4bac9799aaa10b837ceb1_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-14_e3d9d62193b4bac9799aaa10b837ceb1_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader
Size 5.9MB
Sample260714-db677ae12z
SHA256 dae1829f68ac3ca2b84aa0cfb6bed94e6032b0c42448a3357dff479044d82278
MD5 e3d9d62193b4bac9799aaa10b837ceb1
SHA1 a04a78d635603bdfab709a526d6e740870d8338e
SHA512 6134066b97873791e93541fbd8b32bca0aabdf0d7db51a2658076d95bb0a6e1456619c4040706b7191322b1b3ef303e60e910582c1769e124fa8ecb6006a4612
SSDEEP 98304:q00vSiHTgvkI3Z5oDXntWbgY97WY9kxTLNUEaILEDuq9HBdagnvfSyLm2OWypjwo:6dglFFuqO7Kz5R4lBT7
TLSH
T119564FC5B269F858E75906B0082536E446AB25313761D9BDBE8B75C21C2C3DAEDE0F33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

revoked_codesign

Malware Config

Signatures

Revoked Certificate in Chain 1 IoCs

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign

resource
2026-07-14_e3d9d62193b4bac9799aaa10b837ceb1_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-07-14_e3d9d62193b4bac9799aaa10b837ceb1_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

File Explorer

2026-07-14_e3d9d62193b4bac9799aaa10b837ceb1_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

.exe 5.9MB

2026-07-14_e3d9d62193b4bac9799aaa10b837ceb1_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

IMPHASH 0d36f9c1a7f6843b9aa97c10a8f240bf
SHA256 dae1829f68ac3ca2b84aa0cfb6bed94e6032b0c42448a3357dff479044d82278
MD5 e3d9d62193b4bac9799aaa10b837ceb1
SHA1 a04a78d635603bdfab709a526d6e740870d8338e
SHA512 6134066b97873791e93541fbd8b32bca0aabdf0d7db51a2658076d95bb0a6e1456619c4040706b7191322b1b3ef303e60e910582c1769e124fa8ecb6006a4612
SSDEEP 98304:q00vSiHTgvkI3Z5oDXntWbgY97WY9kxTLNUEaILEDuq9HBdagnvfSyLm2OWypjwo:6dglFFuqO7Kz5R4lBT7
TLSH
T119564FC5B269F858E75906B0082536E446AB25313761D9BDBE8B75C21C2C3DAEDE0F33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Revoked Certificate in Chain

One or more certificates in the signing chain have been revoked, indicating potential compromise.

revoked_codesign
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

6d:db:1a:21:f0:9e:a0:ab:a7:0b:dd:b8:ad:97:7c:32:e9:34:da:90:f9:c6:8b:cc:83:96:aa:a8:83:0d:ca:af

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=3219076-9,CN=Horace Oy,O=Horace Oy,L=Espoo,C=FI,1.3.6.1.4.1.311.60.2.1.3=#13024649,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 19, 2021

SERIALNUMBER=3219076-9,CN=Horace Oy,O=Horace Oy,L=Espoo,C=FI,1.3.6.1.4.1.311.60.2.1.3=#13024649,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=3219076-9,CN=Horace Oy,O=Horace Oy,L=Espoo,C=FI,1.3.6.1.4.1.311.60.2.1.3=#13024649,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

0d:cf:cc:da:dc:8d:f8:2c:25:b0:d1:9c:86:f5:c8:fa

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Revoked

Revocation Date

Jul 2, 2021

Timespan

Jul 2, 2021 - Jul 6, 2022

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

Major OS version

Entry point

4845243

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RaiseException GetEnvironmentStringsW CopyFileW TlsSetValue GetModuleHandleW GlobalUnlock GetTempFileNameW FreeEnvironmentStringsW GetStringTypeW FindFirstFileW CreatePipe LoadLibraryExW GetFileAttributesW GetOEMCP GetEnvironmentVariableW WriteConsoleW QueryPerformanceCounter LocalFree GetTempPathW GetNativeSystemInfo SetConsoleCursorPosition GetCommandLineW LCMapStringW GetStartupInfoW InitializeSListHead IsDebuggerPresent InitializeCriticalSectionEx ExitProcess MultiByteToWideChar GlobalHandle SetEvent GetStdHandle GetTimeFormatW GetDateFormatW LCMapStringEx HeapSize FindFirstFileExW FlushFileBuffers AttachConsole CreateDirectoryW ReadConsoleW LoadLibraryW SetFilePointerEx GetProcAddress GetSystemTimeAsFileTime SizeofResource SetStdHandle GetConsoleScreenBufferInfo SetNamedPipeHandleState ExpandEnvironmentStringsW FindClose SetHandleInformation CreateThread InitializeCriticalSection FindNextFileW GetFileSizeEx GetCurrentThreadId FreeLibraryAndExitThread IsValidLocale GetCurrentProcess DecodePointer UnhandledExceptionFilter SetEndOfFile GetModuleFileNameW GetTimeZoneInformation TlsGetValue TerminateProcess CreateEventW GetCurrentDirectoryW GlobalFree ResumeThread TlsAlloc EncodePointer GetModuleHandleExW CreateFileW EnterCriticalSection GetTickCount MulDiv GetACP WaitForSingleObjectEx LeaveCriticalSection GlobalAlloc WideCharToMultiByte DeleteCriticalSection CreateProcessW GetUserDefaultUILanguage MoveFileExW GlobalSize SetCurrentDirectoryW CloseHandle ReadFile GetFileType GetLongPathNameW IsValidCodePage WriteFile FillConsoleOutputCharacterW WaitForSingleObject LockResource GetCPInfo SetLastError GetVersionExW SetThreadPriority GetExitCodeProcess TlsFree FindResourceW HeapReAlloc GetConsoleMode GlobalLock InitializeCriticalSectionAndSpinCount ResetEvent IsProcessorFeaturePresent GetUserDefaultLCID GetConsoleOutputCP GetCommandLineA RtlUnwind CompareStringW GetDriveTypeW GetProcessHeap SetEnvironmentVariableW SetErrorMode GetLastError DeleteFileW GetFullPathNameW WriteConsoleA GetTickCount64 OutputDebugStringW Sleep GetCurrentThread SetUnhandledExceptionFilter ReadConsoleOutputCharacterA ExitThread PeekNamedPipe HeapFree WaitForMultipleObjects FreeLibrary GetCurrentProcessId HeapAlloc FreeConsole GetLogicalDriveStringsW GetLocaleInfoW CreateMutexW LoadResource EnumSystemLocalesW

user32

PostQuitMessage GetDC PostMessageW RemoveMenu RegisterWindowMessageW DestroyMenu DrawFrameControl DdeInitializeW AppendMenuW keybd_event GetFocus GetMessagePos SetWindowLongW RegisterClassW GetClientRect IsMenu SetRect ChangeDisplaySettingsExW GetMenuItemInfoW DdeConnect DdeDisconnect LoadCursorW SetCursor GetWindowPlacement GetMenuItemCount GetComboBoxInfo SendMessageW AnimateWindow GetDesktopWindow DdeCreateStringHandleW MonitorFromPoint DispatchMessageW GetDoubleClickTime GetKeyState IsWindowVisible GetSystemMetrics WaitForInputIdle SetLayeredWindowAttributes RedrawWindow GetWindowLongW SetForegroundWindow HideCaret MessageBeep SetWindowRgn DdeGetData EnableScrollBar EnableWindow IsDialogMessageW UnregisterClassW IsIconic TrackPopupMenu DdePostAdvise ChildWindowFromPointEx GetSubMenu GetCursorPos DrawEdge DdeUninitialize GetAsyncKeyState InsertMenuW DestroyCursor SetScrollInfo GetSysColorBrush DestroyIcon CheckMenuRadioItem CallNextHookEx UnhookWindowsHookEx CreateDialogIndirectParamW GetCapture BringWindowToTop GetCaretBlinkTime CreateWindowExW MessageBoxW TranslateAcceleratorW SetTimer EndDeferWindowPos CreateDialogParamW DrawTextW FillRect DrawStateW GetProcessDefaultLayout GetMessageTime DrawMenuBar CheckMenuItem EnableMenuItem BeginDeferWindowPos EnumDisplaySettingsW GetWindowRect GetParent DdeQueryStringW OffsetRect DdeNameService GetUpdateRgn EnumDisplayMonitors GetSysColor IsWindowEnabled WindowFromPoint MapVirtualKeyW FindWindowExW DestroyWindow KillTimer CreateIconIndirect LoadImageW FlashWindowEx LoadIconW ClientToScreen TranslateMessage GetWindowTextW IsRectEmpty GetClipboardFormatNameW SystemParametersInfoW UpdateWindow InvalidateRect DestroyAcceleratorTable DdeGetLastError DdeCreateDataHandle SetCapture MsgWaitForMultipleObjects GetWindow ModifyMenuW GetDialogBaseUnits SetMenuItemInfoW ScreenToClient DrawIconEx GetSystemMenu ShowWindow CreateMenu PostThreadMessageW InsertMenuItemW GetIconInfo GetScrollInfo SetCursorPos IsClipboardFormatAvailable LoadBitmapW DdeClientTransaction GetClassNameW DeferWindowPos SetRectEmpty SetMenuInfo SetWindowPos PtInRect InflateRect ReleaseCapture IsWindow MapWindowPoints GetDlgItem ChildWindowFromPoint CreateAcceleratorTableW GetActiveWindow SetWindowTextW GetMenuItemID GetMenuState GetMessageW SetParent EndPaint ValidateRgn SetFocus SetWindowsHookExW CopyRect ValidateRect DrawFocusRect DefWindowProcW MoveWindow SetMenu DdeFreeDataHandle UnregisterHotKey CallWindowProcW GetMonitorInfoW GetWindowDC IsZoomed UnionRect VkKeyScanW DdeFreeStringHandle ReleaseDC RegisterHotKey BeginPaint GetWindowTextLengthW RegisterClipboardFormatW MonitorFromWindow ScrollWindow CreatePopupMenu PeekMessageW

shell32

DragAcceptFiles DragQueryFileW SHGetFolderPathW ExtractIconW ExtractIconExW DragQueryPoint DragFinish CommandLineToArgvW ord6 SHGetFileInfoW

comctl32

ImageList_Add ImageList_GetImageInfo ImageList_Create ord17 ord16 ImageList_Replace ImageList_Draw ImageList_SetBkColor ImageList_GetIconSize ImageList_Destroy

oleacc

LresultFromObject

uxtheme

OpenThemeData GetThemeFont IsThemePartDefined GetThemePartSize GetThemeMargins GetThemeSysColor IsThemeActive GetThemeInt GetCurrentThemeName GetThemeColor GetThemeBackgroundExtent GetThemeSysFont DrawThemeParentBackground IsThemeBackgroundPartiallyTransparent IsAppThemed CloseThemeData GetThemeBackgroundContentRect DrawThemeBackground

shlwapi

SHAutoComplete

msimg32

AlphaBlend GradientFill

gdi32

Polyline Pie EndDoc CreatePatternBrush SetPolyFillMode PtInRegion SetViewportExtEx SetViewportOrgEx Rectangle ExtSelectClipRgn SetAbortProc PlayEnhMetaFile CreatePen RoundRect SetWindowExtEx BitBlt GetSystemPaletteEntries GetCharABCWidthsW GetDIBits ModifyWorldTransform LPtoDP SelectObject StartDocW CreateCompatibleBitmap GetDeviceCaps Ellipse CreateDIBitmap SetWindowOrgEx ExtFloodFill ExtTextOutW MoveToEx CreateICW SetMapMode GetDIBColorTable GetBkColor Polygon SelectClipRgn RectInRegion CreatePalette PolyBezier StretchDIBits CreateBitmap MaskBlt CreateHatchBrush DeleteEnhMetaFile GetViewportExtEx CreateDIBSection GetObjectType DeleteDC SelectPalette StretchBlt CreateFontIndirectW GetRgnBox GetNearestPaletteIndex CreateSolidBrush ExtCreatePen GetLayout GetGraphicsMode SetWorldTransform ExtCreateRegion CombineRgn Arc RealizePalette CreateRectRgnIndirect GetClipBox CreateRectRgn ExcludeClipRect SetPixel CreateEnhMetaFileW LineTo CreateDCW GetRegionData GetOutlineTextMetricsW GetObjectW EnumFontFamiliesExW StartPage EqualRgn GetStockObject GetWorldTransform CreateBitmapIndirect GetPaletteEntries SetBkMode SetLayout CloseEnhMetaFile GetTextExtentExPointW SetBrushOrgEx SetBkColor PolyPolygon SetTextColor DPtoLP GetEnhMetaFileHeader SetGraphicsMode CreateCompatibleDC DeleteObject GdiFlush GetEnhMetaFileW GetTextMetricsW GetWindowExtEx GetTextExtentPoint32W OffsetRgn GetPixel SetROP2 SetStretchBltMode EndPage

winspool.drv

OpenPrinterW ClosePrinter DocumentPropertiesW

comdlg32

CommDlgExtendedError PrintDlgW PageSetupDlgW ChooseFontW

advapi32

RegDeleteValueW RegDeleteKeyW RegEnumValueW RegOpenKeyExW RegCreateKeyExW RegSetValueExW GetUserNameW RegQueryValueExW RegEnumKeyW RegCloseKey

ole32

RegisterDragDrop OleFlushClipboard CoLockObjectExternal CoTaskMemFree OleSetClipboard RevokeDragDrop OleIsCurrentClipboard OleInitialize OleGetClipboard OleUninitialize CoCreateInstance CoTaskMemAlloc ReleaseStgMedium

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-14_e3d9d62193b4bac9799aaa10b837ceb1_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

PE Signature issue

kernel32

user32

shell32

comctl32

oleacc

uxtheme

shlwapi

msimg32

gdi32

winspool.drv

comdlg32

advapi32

ole32

generic