2026-07-23_dc5ffe329e912c601f74613221f05b8b_akira_amadey_darkgate_elex_glassworm_icedid_luca-stealer_njrat_remcos_smoke-loader_zxxz

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-23_dc5ffe329e912c601f74613221f05b8b_akira_amadey_darkgate_elex_glassworm_icedid_luca-stealer_njrat_remcos_smoke-loader_zxxz
Size 15.3MB
Sample260723-3byngscr21
SHA256 2ef02704dffdf4d87a002ce8f376eef60a297747ea19c716f605a489ba8dfa6e
MD5 dc5ffe329e912c601f74613221f05b8b
SHA1 3bf401407c3c7cae65a40e4f380d474c7cd1e080
SHA512 1f4566785f025f667c71f5a69b598e61a6bebd9fb4a18555b5202d9b33e1d19a81101fa9a8902135200bda6e1452c33bb5c4d68d3f41a7d7e510970d69210b15
SSDEEP 393216:qDrDuIlr1FUHsVPf2OvdlZixjt5LFRJSsJvR:qDrDu8rIHof/vdlZi75gsJ
TLSH
T1EAF69D52FB8341F6C54B15B1702EB33BEB32590A823CDBE7DBF40D19E979351982A249
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_dc5ffe329e912c601f74613221f05b8b_akira_amadey_darkgate_elex_glassworm_icedid_luca-stealer_njrat_remcos_smoke-loader_zxxz

File Explorer

2026-07-23_dc5ffe329e912c601f74613221f05b8b_akira_amadey_darkgate_elex_glassworm_icedid_luca-stealer_njrat_remcos_smoke-loader_zxxz

.exe 15.3MB

2026-07-23_dc5ffe329e912c601f74613221f05b8b_akira_amadey_darkgate_elex_glassworm_icedid_luca-stealer_njrat_remcos_smoke-loader_zxxz

IMPHASH bc1a2da39bb1e322719318844b07be18
SHA256 2ef02704dffdf4d87a002ce8f376eef60a297747ea19c716f605a489ba8dfa6e
MD5 dc5ffe329e912c601f74613221f05b8b
SHA1 3bf401407c3c7cae65a40e4f380d474c7cd1e080
SHA512 1f4566785f025f667c71f5a69b598e61a6bebd9fb4a18555b5202d9b33e1d19a81101fa9a8902135200bda6e1452c33bb5c4d68d3f41a7d7e510970d69210b15
SSDEEP 393216:qDrDuIlr1FUHsVPf2OvdlZixjt5LFRJSsJvR:qDrDu8rIHof/vdlZi75gsJ
TLSH
T1EAF69D52FB8341F6C54B15B1702EB33BEB32590A823CDBE7DBF40D19E979351982A249
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9738928

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

Launcher.pdb

kernel32

AddVectoredExceptionHandler AreFileApisANSI CopyFileExW CreateDirectoryW CreateEventW CreateFileA CreateFileMappingW CreateFileW CreateIoCompletionPort CreateMutexA CreateMutexW CreateProcessW CreateThread CreateTimerQueueTimer CreateToolhelp32Snapshot CreateWaitableTimerW DeleteCriticalSection DeleteFileA DeleteFileW DeleteTimerQueueTimer DeviceIoControl EnterCriticalSection ExitProcess ExitThread ExpandEnvironmentStringsW FindClose FindFirstFileW FindNextFileW FlushFileBuffers FlushViewOfFile FormatMessageA FormatMessageW FreeEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDiskFreeSpaceA GetDiskFreeSpaceExW GetDiskFreeSpaceW GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesA GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetFileSize GetFileSizeEx GetFileType GetFullPathNameA GetFullPathNameW GetLastError GetLocaleInfoW GetLongPathNameW GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOEMCP GetOverlappedResult GetProcAddress GetProcessHeap GetQueuedCompletionStatus GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemInfo GetSystemTime GetSystemTimeAsFileTime GetTempPathA GetTempPathW GetThreadContext GetThreadTimes GetTickCount GetTimeZoneInformation GetUserDefaultLCID GetUserDefaultUILanguage GetVolumeNameForVolumeMountPointW GetVolumePathNamesForVolumeNameW GetWindowsDirectoryW HeapAlloc HeapCompact HeapCreate HeapDestroy HeapFree HeapReAlloc HeapSize HeapValidate InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsWow64Process LCMapStringW LeaveCriticalSection LocalFree LockFile LockFileEx MapViewOfFile Module32FirstW MoveFileExW MultiByteToWideChar OutputDebugStringA OutputDebugStringW PostQueuedCompletionStatus Process32FirstW Process32NextW QueryPerformanceCounter QueryPerformanceFrequency QueueUserAPC RaiseException ReadFileEx ReadProcessMemory RegisterWaitForSingleObject ReleaseMutex RemoveDirectoryW RemoveVectoredExceptionHandler ResumeThread RtlCaptureContext RtlUnwind SetConsoleCtrlHandler SetEndOfFile SetEnvironmentVariableW SetFileAttributesW SetFilePointer SetFilePointerEx SetFileTime SetHandleInformation SetLastError SetNamedPipeHandleState SetStdHandle SetThreadContext SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepEx SuspendThread SwitchToThread SystemTimeToFileTime TerminateProcess Thread32First Thread32Next TryEnterCriticalSection UnhandledExceptionFilter UnlockFile UnlockFileEx UnmapViewOfFile UnregisterWait VirtualAlloc VirtualAllocEx VirtualFreeEx VirtualProtect VirtualProtectEx VirtualQuery VirtualQueryEx WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW WriteFileEx WriteProcessMemory lstrcmpA lstrlenW

advapi32

CryptAcquireContextW CryptCreateHash CryptDestroyHash CryptDestroyKey CryptGetHashParam CryptHashData CryptImportKey CryptReleaseContext OpenProcessToken RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueExW SystemFunction036

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

user32

AdjustWindowRect AdjustWindowRectEx AppendMenuW CallNextHookEx ChangeDisplaySettingsExW CheckMenuItem ClientToScreen ClipCursor CreateAcceleratorTableW CreateIcon CreateMenu CreatePopupMenu CreateWindowExW DefWindowProcW DestroyAcceleratorTable DestroyIcon DestroyMenu DestroyWindow DispatchMessageA DispatchMessageW DrawIconEx DrawMenuBar DrawTextW EnableMenuItem EnableWindow EnumChildWindows EnumDisplayMonitors EnumWindows FillRect FindWindowExW FindWindowW FlashWindowEx GetActiveWindow GetAsyncKeyState GetClientRect GetClipCursor GetCursorPos GetDC GetForegroundWindow GetKeyState GetKeyboardLayout GetKeyboardState GetMenu GetMenuBarInfo GetMenuItemInfoW GetMessageA GetMessageW GetMonitorInfoW GetParent GetRawInputData GetSystemMenu GetSystemMetrics GetUpdateRect GetWindow GetWindowDC GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId InsertMenuW InvalidateRect InvalidateRgn IsIconic IsWindow IsWindowEnabled IsWindowVisible KillTimer LoadCursorW MapVirtualKeyExW MapVirtualKeyW MapWindowPoints MessageBoxW MonitorFromPoint MonitorFromRect MonitorFromWindow MsgWaitForMultipleObjectsEx OffsetRect PeekMessageW PostMessageW PostQuitMessage PostThreadMessageW RedrawWindow RegisterClassExW RegisterClassW RegisterRawInputDevices RegisterWindowMessageA ReleaseCapture ReleaseDC RemoveMenu ScreenToClient SendInput SendMessageW SetCapture SetCursor SetCursorPos SetFocus SetForegroundWindow SetMenu SetMenuItemInfoW SetParent SetPropW SetTimer SetWindowLongW SetWindowPlacement SetWindowPos SetWindowRgn SetWindowTextW ShowCursor ShowWindow ShowWindowAsync ToUnicodeEx TrackMouseEvent TrackPopupMenu TranslateAcceleratorW TranslateMessage UnhookWindowsHookEx UpdateWindow ValidateRect VkKeyScanW

ole32

CoCreateInstance CoInitialize CoInitializeEx CoSetProxyBlanket CoUninitialize OleInitialize RegisterDragDrop RevokeDragDrop

shell32

DragFinish DragQueryFileW ExtractIconW ILCreateFromPathW ILFree SHAppBarMessage SHCoCreateInstance SHGetFolderPathW SHOpenFolderAndSelectItems SHParseDisplayName ShellExecuteExW Shell_NotifyIconW

oleaut32

GetErrorInfo SafeArrayAccessData SafeArrayCreateVector SafeArrayDestroy SafeArrayUnaccessData SetErrorInfo SysAllocStringLen SysFreeString SysStringLen VariantClear

dbghelp

MiniDumpWriteDump

ntdll

NtCreateFile NtCreateNamedPipeFile NtDeviceIoControlFile NtOpenFile NtReadFile NtWriteFile RtlAdjustPrivilege RtlGetVersion RtlNtStatusToDosError

gdi32

BitBlt CombineRgn CreateCompatibleDC CreateDIBSection CreateRectRgn CreateSolidBrush DeleteDC DeleteObject GetDeviceCaps SelectObject SetBkMode SetTextColor

secur32

AcceptSecurityContext AcquireCredentialsHandleA ApplyControlToken DecryptMessage DeleteSecurityContext EncryptMessage FreeContextBuffer FreeCredentialsHandle InitializeSecurityContextW QueryContextAttributesW

crypt32

CertAddCertificateContextToStore CertAddEncodedCertificateToStore CertCloseStore CertCreateCertificateChainEngine CertCreateCertificateContext CertDuplicateCertificateChain CertDuplicateCertificateContext CertDuplicateStore CertEnumCertificatesInStore CertFreeCertificateChain CertFreeCertificateChainEngine CertFreeCertificateContext CertGetCertificateChain CertOpenStore CertSetCertificateContextProperty CertVerifyCertificateChainPolicy CryptDecodeObjectEx CryptStringToBinaryA

psapi

GetModuleFileNameExW GetProcessImageFileNameW

Name

.text

Size

9.6MB

Virtual Size

9.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5.4MB

Virtual Size

5.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

37KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1024B

Virtual Size

517B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

298KB

Virtual Size

297KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_dc5ffe329e912c601f74613221f05b8b_akira_amadey_darkgate_elex_glassworm_icedid_luca-stealer_njrat_remcos_smoke-loader_zxxz

kernel32

advapi32

version

user32

ole32

shell32

oleaut32

dbghelp

ntdll

gdi32

secur32

crypt32

psapi

generic