2026-07-28_0c46247d36e79b7dcb1007c54a670713_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat

General

Target
2026-07-28_0c46247d36e79b7dcb1007c54a670713_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat
Size 804KB
Sample260728-flcsfayza1
SHA256 9bbca63e3ed7844c4c4405ee493cb5252b19d710ab764f89285fe02cdeffe528
MD5 0c46247d36e79b7dcb1007c54a670713
SHA1 65f29408a85120c3f1b69a33704f318e735081b1
SHA512 5f758884469386f2ed40b730a90ef27cbcc1ed80f1bc02acb0cb79660466f25632f8af46ace08cfa506d47c2e7a46b0aa6ae3749cfbbac6fe5fc1e1b7235bb20
SSDEEP 24576:41wAwR4sVsOzvWsjQtq5Yvm41T3KJI9YL7zbLR:41wAw6sVsONQtq5Yvm4x3KJI9YLDLR
TLSH
T133056B1075808477E16211320AACF7B896AEBD304B9516CB73D85EBBFBB96C15F3124B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-28_0c46247d36e79b7dcb1007c54a670713_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat

File Explorer

2026-07-28_0c46247d36e79b7dcb1007c54a670713_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat

.exe 804KB

2026-07-28_0c46247d36e79b7dcb1007c54a670713_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat

IMPHASH 7037febae0bd70529b47680e3eb5c00d
SHA256 9bbca63e3ed7844c4c4405ee493cb5252b19d710ab764f89285fe02cdeffe528
MD5 0c46247d36e79b7dcb1007c54a670713
SHA1 65f29408a85120c3f1b69a33704f318e735081b1
SHA512 5f758884469386f2ed40b730a90ef27cbcc1ed80f1bc02acb0cb79660466f25632f8af46ace08cfa506d47c2e7a46b0aa6ae3749cfbbac6fe5fc1e1b7235bb20
SSDEEP 24576:41wAwR4sVsOzvWsjQtq5Yvm41T3KJI9YL7zbLR:41wAw6sVsONQtq5Yvm4x3KJI9YLDLR
TLSH
T133056B1075808477E16211320AACF7B896AEBD304B9516CB73D85EBBFBB96C15F3124B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

256543

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Script\app3\Release2\Console-Opener.pdb

kernel32

MultiByteToWideChar LoadLibraryExA CreateFileW CloseHandle ReadConsoleW FormatMessageA WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection LocalFree GetLocaleInfoEx EncodePointer DecodePointer LCMapStringEx GetStringTypeW CompareStringEx GetCPInfo GetCurrentThreadId IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW RaiseException GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead GetLastError HeapAlloc HeapFree GetProcessHeap VirtualQuery FreeLibrary GetProcAddress RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetModuleFileNameW LoadLibraryExW SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW GetStdHandle WriteFile GetCommandLineA GetCommandLineW GetCurrentThread GetTempPathW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType HeapReAlloc SetConsoleCtrlHandler GetTimeZoneInformation FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW OutputDebugStringW SetStdHandle GetFileSizeEx SetFilePointerEx HeapSize FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile WriteConsoleW

version

VerQueryValueW

Name

.text

Size

607KB

Virtual Size

606KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

99KB

Virtual Size

99KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.msvcjmc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

67KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-28_0c46247d36e79b7dcb1007c54a670713_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_njrat

kernel32

version

generic