2026-08-03_26036d046e9ff9e2d11b061d5be12a3e_amadey_darkgate_elex_luca-stealer_lynx_njrat

General

Target
2026-08-03_26036d046e9ff9e2d11b061d5be12a3e_amadey_darkgate_elex_luca-stealer_lynx_njrat
Size 2.5MB
Sample260803-ddyc3abc38
SHA256 c37eb3dbc5d31ed7be6d0893f41ea2aaad2befc90971a9c38a39429fdb0e5ea7
MD5 26036d046e9ff9e2d11b061d5be12a3e
SHA1 95ecb5603456cbef0ca04a56f15fc30d35496e0b
SHA512 b8faf2bfff89f12f7c1835ae9f92f3932d820bce8b7ca716650f4b3d475d8901717259b075746c455405b497e84d511fa771bebaeaf4f8dcd89d8fd18ad68c68
SSDEEP 49152:PpNG5G1OTLuakV6VzmrJmfhTohyQfnvsfqP9eotli3Cnx6Xozsr8zlLwJIh:P3ALuL6GmhEhy0nvG5wFRKIh
TLSH
T1BBC5CF22B350C036C6C252F29C7DAB95866DEE702FA186C372945E6C5DB61C32F3671B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_26036d046e9ff9e2d11b061d5be12a3e_amadey_darkgate_elex_luca-stealer_lynx_njrat

File Explorer

2026-08-03_26036d046e9ff9e2d11b061d5be12a3e_amadey_darkgate_elex_luca-stealer_lynx_njrat

.exe 2.5MB

2026-08-03_26036d046e9ff9e2d11b061d5be12a3e_amadey_darkgate_elex_luca-stealer_lynx_njrat

IMPHASH 10769069e40ad35df637fb1ea1dc545a
SHA256 c37eb3dbc5d31ed7be6d0893f41ea2aaad2befc90971a9c38a39429fdb0e5ea7
MD5 26036d046e9ff9e2d11b061d5be12a3e
SHA1 95ecb5603456cbef0ca04a56f15fc30d35496e0b
SHA512 b8faf2bfff89f12f7c1835ae9f92f3932d820bce8b7ca716650f4b3d475d8901717259b075746c455405b497e84d511fa771bebaeaf4f8dcd89d8fd18ad68c68
SSDEEP 49152:PpNG5G1OTLuakV6VzmrJmfhTohyQfnvsfqP9eotli3Cnx6Xozsr8zlLwJIh:P3ALuL6GmhEhy0nvG5wFRKIh
TLSH
T1BBC5CF22B350C036C6C252F29C7DAB95866DEE702FA186C372945E6C5DB61C32F3671B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

1111397

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\buildworker\steam_rel_client_win32\build\src\external\fossilize\fossilize-replayRelease\fossilize-replay.pdb

kernel32

FindClose FindFirstFileExW FindNextFileW GetFullPathNameW CloseHandle GetLastError GetCurrentProcessId VirtualQuery MapViewOfFile UnmapViewOfFile CreateFileMappingA GetStdHandle GetEnvironmentStrings FreeEnvironmentStringsA CreateFileA SetHandleInformation ReleaseMutex WaitForSingleObject CreateMutexA TerminateProcess GetExitCodeProcess ResumeThread CreateProcessA AssignProcessToJobObject SetInformationJobObject CreateJobObjectA CreateDirectoryA SetFileTime GetSystemTime GetModuleFileNameA GetModuleHandleA SystemTimeToFileTime FlushFileBuffers ReadFile WriteFile DuplicateHandle SetUnhandledExceptionFilter SetErrorMode GetOverlappedResult ResetEvent CreateEventA SetWaitableTimer WaitForMultipleObjects GetCurrentProcess ExitProcess FormatMessageA OpenMutexA CreateWaitableTimerA OpenFileMappingA CreateNamedPipeA LoadLibraryA GetProcAddress HeapSize ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId QueryPerformanceCounter QueryPerformanceFrequency WaitForSingleObjectEx Sleep GetExitCodeThread GetNativeSystemInfo WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW GetTickCount64 WideCharToMultiByte InitializeCriticalSectionEx GetSystemTimeAsFileTime GetModuleHandleW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter GetStartupInfoW InitializeSListHead RaiseException RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW CreateThread ExitThread FreeLibraryAndExitThread CreateFileW GetFileType GetDriveTypeW GetFileInformationByHandle PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime SetConsoleCtrlHandler GetModuleFileNameW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetConsoleOutputCP GetConsoleMode ReadConsoleW SetFilePointerEx GetFileSizeEx HeapReAlloc SetStdHandle SetEndOfFile GetCurrentDirectoryW GetTimeZoneInformation DeleteFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_26036d046e9ff9e2d11b061d5be12a3e_amadey_darkgate_elex_luca-stealer_lynx_njrat

kernel32

generic