2026-07-25_a9205ba01b7b910f86896ff5781fedb9_amadey_darkgate_elex_luca-stealer_lynx_njrat_ramnit_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-25_a9205ba01b7b910f86896ff5781fedb9_amadey_darkgate_elex_luca-stealer_lynx_njrat_ramnit_smoke-loader
Size 2.9MB
Sample260725-e9bplszvdy
SHA256 ec5bc3b6a0b430435bc27c2ad89c0f0cc5f19207dd3766b805519821f9564058
MD5 a9205ba01b7b910f86896ff5781fedb9
SHA1 8f3d2843882179806b4737cdb347203a5effe262
SHA512 652f245735f3d733b8e6c87bcb8712d7f5c1394679de87fa9524030017c92f7b36f6260dbad75f55673fe3100808071fa6ee46ee850386be65121c56265f07a6
SSDEEP 49152:DoBejZqtXm5M6kdNJ2O6ni9vgKKE4Qn0Y9efX+mKDDmX:DoBMZqFEuPmX
TLSH
T1C3E5C5632367B34FC664843082E8559D4C9C572D8FF38FAA251CAD5CC4E89E3259EB6C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-25_a9205ba01b7b910f86896ff5781fedb9_amadey_darkgate_elex_luca-stealer_lynx_njrat_ramnit_smoke-loader

File Explorer

2026-07-25_a9205ba01b7b910f86896ff5781fedb9_amadey_darkgate_elex_luca-stealer_lynx_njrat_ramnit_smoke-loader

.exe 2.9MB

2026-07-25_a9205ba01b7b910f86896ff5781fedb9_amadey_darkgate_elex_luca-stealer_lynx_njrat_ramnit_smoke-loader

IMPHASH 1a24286356f4d58dc2d6920e3df262af
SHA256 ec5bc3b6a0b430435bc27c2ad89c0f0cc5f19207dd3766b805519821f9564058
MD5 a9205ba01b7b910f86896ff5781fedb9
SHA1 8f3d2843882179806b4737cdb347203a5effe262
SHA512 652f245735f3d733b8e6c87bcb8712d7f5c1394679de87fa9524030017c92f7b36f6260dbad75f55673fe3100808071fa6ee46ee850386be65121c56265f07a6
SSDEEP 49152:DoBejZqtXm5M6kdNJ2O6ni9vgKKE4Qn0Y9efX+mKDDmX:DoBMZqFEuPmX
TLSH
T1C3E5C5632367B34FC664843082E8559D4C9C572D8FF38FAA251CAD5CC4E89E3259EB6C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3039232

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\JEGX_DEV\dev\GPU-Shark\GPU_Shark_SRC-vs2010\Release\gpushark.pdb

kernel32

CreateFileMappingW UnmapViewOfFile MapViewOfFile WriteConsoleW SetEndOfFile HeapSize SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW GlobalUnlock HeapReAlloc ReadConsoleW SetFilePointerEx GetFileSizeEx ReadFile GetConsoleMode GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW GetFileType HeapAlloc HeapFree WriteFile GetStdHandle GetModuleHandleExW ExitProcess TlsFree TlsSetValue GlobalLock GlobalAlloc CloseHandle WaitForSingleObject CreateThread FreeLibrary GetProcAddress LoadLibraryA GetPrivateProfileIntA WritePrivateProfileStringA GetCurrentThread DeleteCriticalSection WideCharToMultiByte ExitThread FindClose TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RaiseException RtlUnwind InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo GetStringTypeW LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx GetModuleHandleA QueryPerformanceCounter GetCurrentProcess GlobalMemoryStatusEx GetSystemInfo GetVersionExA GlobalMemoryStatus MultiByteToWideChar GetLocalTime LoadLibraryExA EnterCriticalSection LeaveCriticalSection InitializeCriticalSection InterlockedDecrement InterlockedIncrement SetEnvironmentVariableW LocalAlloc GetSystemDirectoryW GetFileAttributesW CreateFileW LocalFree GetModuleHandleW GetModuleFileNameW SetLastError GetLastError LoadLibraryExW GetModuleFileNameA VerifyVersionInfoW VerSetConditionMask lstrcmpW ExpandEnvironmentStringsW GetFullPathNameW Sleep

user32

GetSystemMetrics EnumDisplayDevicesA GetClassInfoExA MessageBoxA EndDialog SetDlgItemTextA SetWindowTextA CreateWindowExA RegisterClassExA CloseClipboard SetClipboardData EmptyClipboard OpenClipboard PostQuitMessage ScrollWindow GetScrollInfo SetScrollInfo DefWindowProcW CreateDialogParamW InvalidateRect SetWindowPos DialogBoxParamW CheckMenuItem ModifyMenuA GetSubMenu GetMenu ReleaseDC GetDC SetTimer UpdateWindow ShowWindow CreateWindowExW RegisterClassExW LoadCursorW LoadIconW KillTimer DispatchMessageW TranslateMessage TranslateAcceleratorW GetMessageW LoadAcceleratorsW LoadStringW EndPaint FillRect GetClientRect BeginPaint DestroyWindow EnumDisplaySettingsA DefWindowProcA UnregisterClassA

gdi32

TextOutW SelectObject CreateCompatibleBitmap GetTextMetricsW DeleteObject DeleteDC CreateCompatibleDC SetBkColor SetBkMode SetTextColor TextOutA ChoosePixelFormat SetPixelFormat BitBlt GetStockObject CreateSolidBrush

shell32

ShellExecuteA

opengl32

glGetIntegerv glGetString wglGetProcAddress glGetFloatv glLightModeli wglCreateContext wglDeleteContext wglMakeCurrent wglGetCurrentDC

ws2_32

WSAStartup getaddrinfo socket ioctlsocket closesocket WSACleanup connect WSAGetLastError select send recv

advapi32

RegQueryValueExA RegOpenKeyExA RegCloseKey RegOpenKeyA

Name

.text

Size

390KB

Virtual Size

389KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

253KB

Virtual Size

252KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

116KB

Virtual Size

138KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rmnet

Size

56KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-25_a9205ba01b7b910f86896ff5781fedb9_amadey_darkgate_elex_luca-stealer_lynx_njrat_ramnit_smoke-loader

kernel32

user32

gdi32

shell32

opengl32

ws2_32

advapi32

generic