2026-07-15_f5275b704783ccd706a068b524aadec3_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-15_f5275b704783ccd706a068b524aadec3_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader
Size 4.7MB
Sample260715-encpsabs4j
SHA256 6f08358222ef70b3b2a85ed2374d959a1652b8a9bda5a883c9ff21bb0f74de43
MD5 f5275b704783ccd706a068b524aadec3
SHA1 ff32529db84a77b99eaeb7ab2a6d93857bfb36af
SHA512 bc8117d0ef207d01e612ee93bb312b84bc80e3b144fd4808cb9e02e4f9612a48d6e2f9b729f624a420365f3548d986a822b1c10657796c8f4e9fd67b0eceae0e
SSDEEP 98304:gC357c5mhaanky8F+GNqsCEp50ZVt9F7gQU/lu2nJSN8H3Q685+j:V357c5mhaanky8FjssCE/0ZVR8kPNEls
TLSH
T189368C87B6C2E0F2DC6740F9129E632F92A85D345B61C9D793D06FEC25F36C209315AA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-15_f5275b704783ccd706a068b524aadec3_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

File Explorer

2026-07-15_f5275b704783ccd706a068b524aadec3_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

.exe 4.7MB

2026-07-15_f5275b704783ccd706a068b524aadec3_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

SHA256 6f08358222ef70b3b2a85ed2374d959a1652b8a9bda5a883c9ff21bb0f74de43
MD5 f5275b704783ccd706a068b524aadec3
SHA1 ff32529db84a77b99eaeb7ab2a6d93857bfb36af
SHA512 bc8117d0ef207d01e612ee93bb312b84bc80e3b144fd4808cb9e02e4f9612a48d6e2f9b729f624a420365f3548d986a822b1c10657796c8f4e9fd67b0eceae0e
SSDEEP 98304:gC357c5mhaanky8F+GNqsCEp50ZVt9F7gQU/lu2nJSN8H3Q685+j:V357c5mhaanky8FjssCE/0ZVR8kPNEls
TLSH
T189368C87B6C2E0F2DC6740F9129E632F92A85D345B61C9D793D06FEC25F36C209315AA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1065904

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

__wibu00

Size

167KB

Virtual Size

167KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

__wibu01

Size

67KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

__wibu02

Size

4KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

__wibu03

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

__wibu04

Size

3.0MB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

__wibu05

Size

341KB

Virtual Size

344KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

__wibu06

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

__wibu07

Size

838KB

Virtual Size

840KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ

Name

__wibu08

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

__wibu09

Size

1024B

Virtual Size

4KB

Characteristics

Name

__wibu0a

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

__wibu0b

Size

323KB

Virtual Size

324KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-15_f5275b704783ccd706a068b524aadec3_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

generic