2026-07-28_c5e487eb699aae4f6869f25f0c42a16f_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat

General

Target
2026-07-28_c5e487eb699aae4f6869f25f0c42a16f_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat
Size 771KB
Sample260728-e3748sar3t
SHA256 3449070054f36606d04c395f57edf2bb6e401c326743c4a089417726739c8b7f
MD5 c5e487eb699aae4f6869f25f0c42a16f
SHA1 e268ce101ee51f4ad400290fd688c1ab5680f6c0
SHA512 ecf550ba64fd146c51694264a63c54d600da96206daf3039b04da944325ff7ec6c74dda3943f469e056f431eda36ebf5901d200b1934d7bf1458c8453f57c310
SSDEEP 24576:NYwAwE8sVsqzvWsHQNq5YvmY1T3KJI9YL7zbKu:NYwAwXsVsqBQNq5YvmYx3KJI9YLDKu
TLSH
T124F47C117580C037E26211321AADE3B996ADBD304B991ACB73D837BBAF756C15F3124B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-28_c5e487eb699aae4f6869f25f0c42a16f_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat

File Explorer

2026-07-28_c5e487eb699aae4f6869f25f0c42a16f_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat

.exe 771KB

2026-07-28_c5e487eb699aae4f6869f25f0c42a16f_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat

IMPHASH 7037febae0bd70529b47680e3eb5c00d
SHA256 3449070054f36606d04c395f57edf2bb6e401c326743c4a089417726739c8b7f
MD5 c5e487eb699aae4f6869f25f0c42a16f
SHA1 e268ce101ee51f4ad400290fd688c1ab5680f6c0
SHA512 ecf550ba64fd146c51694264a63c54d600da96206daf3039b04da944325ff7ec6c74dda3943f469e056f431eda36ebf5901d200b1934d7bf1458c8453f57c310
SSDEEP 24576:NYwAwE8sVsqzvWsHQNq5YvmY1T3KJI9YL7zbKu:NYwAwXsVsqBQNq5YvmYx3KJI9YLDKu
TLSH
T124F47C117580C037E26211321AADE3B996ADBD304B991ACB73D837BBAF756C15F3124B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

256543

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Script\app3\Release2\Console-Opener.pdb

kernel32

MultiByteToWideChar LoadLibraryExA CreateFileW CloseHandle ReadConsoleW FormatMessageA WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection LocalFree GetLocaleInfoEx EncodePointer DecodePointer LCMapStringEx GetStringTypeW CompareStringEx GetCPInfo GetCurrentThreadId IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW RaiseException GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead GetLastError HeapAlloc HeapFree GetProcessHeap VirtualQuery FreeLibrary GetProcAddress RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetModuleFileNameW LoadLibraryExW SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW GetStdHandle WriteFile GetCommandLineA GetCommandLineW GetCurrentThread GetTempPathW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType HeapReAlloc SetConsoleCtrlHandler GetTimeZoneInformation FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW OutputDebugStringW SetStdHandle GetFileSizeEx SetFilePointerEx HeapSize FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile WriteConsoleW

version

VerQueryValueW

Name

.text

Size

607KB

Virtual Size

606KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

99KB

Virtual Size

99KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.msvcjmc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

34KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-28_c5e487eb699aae4f6869f25f0c42a16f_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat

kernel32

version

generic