2026-08-04_98471b79bcd87d9cb72f7ad55cadcd00_amadey_darkgate_elex_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-04_98471b79bcd87d9cb72f7ad55cadcd00_amadey_darkgate_elex_luca-stealer_lynx_njrat
Size 3.3MB
Sample260804-gxlp6aeb82
SHA256 f5aa03929c20650aae52e4cdb3f4284ab73c8ba9672f26fed57ee23a15af7b84
MD5 98471b79bcd87d9cb72f7ad55cadcd00
SHA1 5a5c2257e936f094daa3bb09c22f2f894a0f8a8a
SHA512 a0d13de1045c8770961e6336d4d6699e136b1877d4ccd6a36fed78327af6894bb0318049c4d3ca2718707d42007f08ca3464c081fd24ffb8b3992f1ea6b72bb5
SSDEEP 49152:8ixAMxQnt7Lv7ywAeyfvE0Z3R0vnxn1o2d5PF0xucb5+Pl6bJTIZ5jdgpH:JGMxQntvnAeKtEnW2XFmslgJTIZ5Bgp
TLSH
T1B5F5BF3172918120D5B3D270297EABEB5B79BC256F76408F32DCB6390B325C09D75B2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_98471b79bcd87d9cb72f7ad55cadcd00_amadey_darkgate_elex_luca-stealer_lynx_njrat

File Explorer

2026-08-04_98471b79bcd87d9cb72f7ad55cadcd00_amadey_darkgate_elex_luca-stealer_lynx_njrat

.exe 3.3MB

2026-08-04_98471b79bcd87d9cb72f7ad55cadcd00_amadey_darkgate_elex_luca-stealer_lynx_njrat

IMPHASH 3bf7513ee779b02e243d13cbd899b324
SHA256 f5aa03929c20650aae52e4cdb3f4284ab73c8ba9672f26fed57ee23a15af7b84
MD5 98471b79bcd87d9cb72f7ad55cadcd00
SHA1 5a5c2257e936f094daa3bb09c22f2f894a0f8a8a
SHA512 a0d13de1045c8770961e6336d4d6699e136b1877d4ccd6a36fed78327af6894bb0318049c4d3ca2718707d42007f08ca3464c081fd24ffb8b3992f1ea6b72bb5
SSDEEP 49152:8ixAMxQnt7Lv7ywAeyfvE0Z3R0vnxn1o2d5PF0xucb5+Pl6bJTIZ5jdgpH:JGMxQntvnAeKtEnW2XFmslgJTIZ5Bgp
TLSH
T1B5F5BF3172918120D5B3D270297EABEB5B79BC256F76408F32DCB6390B325C09D75B2A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

616911

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Jenkins\workspace\MBAM-Windows\A_MB5_MBSetup\bin\Win32\Release\MBSetup.pdb

kernel32

LeaveCriticalSection EnterCriticalSection GetLastError MultiByteToWideChar SizeofResource LoadResource FindResourceW LoadLibraryExW GetModuleFileNameW InitializeCriticalSectionEx DeleteCriticalSection RaiseException IsWow64Process GetCurrentProcess VerifyVersionInfoW VerSetConditionMask GetSystemDirectoryW CreateFileW DeviceIoControl CloseHandle GetCurrentThreadId CreateEventW SetLastError LockResource FindResourceExW Sleep DeleteFileW GlobalFree WaitForSingleObject LocalFree FormatMessageW LocalAlloc CallNamedPipeW GetWindowsDirectoryW SetCurrentDirectoryW GetCommandLineW DecodePointer lstrcmpiW GetNativeSystemInfo GetDiskFreeSpaceExW FindFirstFileW FindClose CreateProcessW FindNextFileW WideCharToMultiByte GlobalAlloc GlobalLock SetThreadUILanguage LoadLibraryW CreateDirectoryW GetLogicalDrives GetTempPathW MoveFileExW InitializeProcThreadAttributeList UpdateProcThreadAttribute DeleteProcThreadAttributeList OpenProcess ResumeThread TerminateProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW K32GetModuleFileNameExW GetCurrentDirectoryW GetCurrentProcessId GetModuleFileNameA ProcessIdToSessionId OutputDebugStringW GetLocalTime GetExitCodeProcess GetFileSizeEx GetFileAttributesW WriteConsoleW SetStdHandle SetEnvironmentVariableW GetProcAddress GetModuleHandleW FreeLibrary GetProcessHeap HeapAlloc HeapFree HeapReAlloc HeapSize HeapDestroy CreateMutexW MulDiv FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage GetTimeZoneInformation ReadConsoleW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW SetEndOfFile LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW ReadFile SetFilePointerEx GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA FormatMessageA GetStringTypeW GetLocaleInfoEx FindFirstFileExW GetFileAttributesExW GetFileInformationByHandle SetFileInformationByHandle AreFileApisANSI CopyFileW GetFileInformationByHandleEx QueryPerformanceCounter QueryPerformanceFrequency ReleaseSRWLockExclusive AcquireSRWLockExclusive EncodePointer LCMapStringEx WakeAllConditionVariable SleepConditionVariableSRW GetSystemTimeAsFileTime GetCPInfo IsDebuggerPresent InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent VirtualAlloc VirtualFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW CreateThread ExitThread FreeLibraryAndExitThread GetCommandLineA GetStdHandle WriteFile GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode

dwmapi

DwmGetWindowAttribute

crypt32

CryptMsgClose CertCloseStore CertFreeCertificateContext CertGetNameStringW CertFindCertificateInStore CryptMsgGetParam CryptQueryObject

rpcrt4

UuidToStringW RpcStringFreeW UuidCreate

wtsapi32

WTSFreeMemory WTSQuerySessionInformationW

wintrust

WinVerifyTrust

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-04_98471b79bcd87d9cb72f7ad55cadcd00_amadey_darkgate_elex_luca-stealer_lynx_njrat

kernel32

dwmapi

crypt32

rpcrt4

wtsapi32

wintrust

generic