2026-07-31_4f5f378118c7ea14b1d82a1f7d0e72e9_amadey_cobalt-strike_darkgate_elex_luca-stealer_njrat_play

General

Target
2026-07-31_4f5f378118c7ea14b1d82a1f7d0e72e9_amadey_cobalt-strike_darkgate_elex_luca-stealer_njrat_play
Size 220KB
Sample260731-dpbnfaak6x
SHA256 00c05112a0e082bbfd00f0621e078ab8a4a2e9cd5c6cab2b099d485821606c81
MD5 4f5f378118c7ea14b1d82a1f7d0e72e9
SHA1 e3e7b1bef116a71bec3a1bf2e5f429affa1e8f27
SHA512 fe7e518c713159f86e6198299663e90a0692dc77d7f22fe14498ae75848592b4cc055b0095470554d8f0bd80dbea28d027f0842d863b956668229c88403c5114
SSDEEP 3072:Xti6KFXwJ3VS3Saz3bI45Ov1paeaIxZwbEjjAgr7MZVJWDxFZ7iFR8dgzfouYD4x:9jJ3laMvioWbEAo4Z+grHzfo9D4dFhv
TLSH
T16A245B517842C033C56A5BF05AE7CFB5897F6D614FB0A8FB77802FAB89201C2D635A16
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-31_4f5f378118c7ea14b1d82a1f7d0e72e9_amadey_cobalt-strike_darkgate_elex_luca-stealer_njrat_play

File Explorer

2026-07-31_4f5f378118c7ea14b1d82a1f7d0e72e9_amadey_cobalt-strike_darkgate_elex_luca-stealer_njrat_play

.exe 220KB

2026-07-31_4f5f378118c7ea14b1d82a1f7d0e72e9_amadey_cobalt-strike_darkgate_elex_luca-stealer_njrat_play

IMPHASH 942f852c7342116affb69acf1ba4e673
SHA256 00c05112a0e082bbfd00f0621e078ab8a4a2e9cd5c6cab2b099d485821606c81
MD5 4f5f378118c7ea14b1d82a1f7d0e72e9
SHA1 e3e7b1bef116a71bec3a1bf2e5f429affa1e8f27
SHA512 fe7e518c713159f86e6198299663e90a0692dc77d7f22fe14498ae75848592b4cc055b0095470554d8f0bd80dbea28d027f0842d863b956668229c88403c5114
SSDEEP 3072:Xti6KFXwJ3VS3Saz3bI45Ov1paeaIxZwbEjjAgr7MZVJWDxFZ7iFR8dgzfouYD4x:9jJ3laMvioWbEAo4Z+grHzfo9D4dFhv
TLSH
T16A245B517842C033C56A5BF05AE7CFB5897F6D614FB0A8FB77802FAB89201C2D635A16
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

44313

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Usuario\source\repos\HaiKamDesu\BBCF-Improvement-Mod\bin\Release\BBCFIMUpdater.pdb

kernel32

CreateDirectoryW ReadFile GetFileSizeEx GetCommandLineW WriteFile GetPrivateProfileIntW WaitForSingleObject CreateFileW GetFileAttributesW OpenProcess MultiByteToWideChar GetPrivateProfileStringW Sleep GetLastError CloseHandle LocalFree CopyFileW WideCharToMultiByte WriteConsoleW SetEndOfFile HeapReAlloc HeapSize ReadConsoleW FlushFileBuffers IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind RaiseException SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle GetModuleFileNameW ExitProcess GetModuleHandleExW HeapFree HeapAlloc GetFileType GetConsoleOutputCP GetConsoleMode SetFilePointerEx FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW GetProcessHeap DecodePointer

user32

MessageBoxW

shell32

ShellExecuteW CommandLineToArgvW

Name

.text

Size

126KB

Virtual Size

126KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

42KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

41KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-31_4f5f378118c7ea14b1d82a1f7d0e72e9_amadey_cobalt-strike_darkgate_elex_luca-stealer_njrat_play

kernel32

user32

shell32

generic