2026-08-04_66485eff8025b0f99c18f61c0f8c7bc4_amadey_cobalt-strike_darkgate_elex_glassworm_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-04_66485eff8025b0f99c18f61c0f8c7bc4_amadey_cobalt-strike_darkgate_elex_glassworm_luca-stealer_lynx_njrat
Size 834KB
Sample260804-hsld9syvct
SHA256 7d9963cdbdfaefdc66373c1c4fec046fc661591f5b046da59d171f0862ba78bd
MD5 66485eff8025b0f99c18f61c0f8c7bc4
SHA1 5e2f8406c7b13e69ac1dd889a105b5a34c8c1eef
SHA512 f3327948cda6e5197bcc5ab513488c583e587b9f20b07ede84e257d9fa86c4f67045a811fcf47a35bebc1cc2fe69fa8bb682f19bd79a10a672d4e8be413e87b3
SSDEEP 12288:WBhA3SfDkVs+k3mI62ATai/QqzlFCl7yZVrLnJtZsbTTeIhcUqeLYqDRY:giifDk0/AT71Cl7UpsX2Uqoll
TLSH
T19F059E02B6D18471F192017A0A3BF77E6E3DB1105B25C9C7C3E4D99859622E2EA3F35E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_66485eff8025b0f99c18f61c0f8c7bc4_amadey_cobalt-strike_darkgate_elex_glassworm_luca-stealer_lynx_njrat

File Explorer

2026-08-04_66485eff8025b0f99c18f61c0f8c7bc4_amadey_cobalt-strike_darkgate_elex_glassworm_luca-stealer_lynx_njrat

.exe 834KB

2026-08-04_66485eff8025b0f99c18f61c0f8c7bc4_amadey_cobalt-strike_darkgate_elex_glassworm_luca-stealer_lynx_njrat

IMPHASH 4e2502eead9c4f9bdce714ff55832165
SHA256 7d9963cdbdfaefdc66373c1c4fec046fc661591f5b046da59d171f0862ba78bd
MD5 66485eff8025b0f99c18f61c0f8c7bc4
SHA1 5e2f8406c7b13e69ac1dd889a105b5a34c8c1eef
SHA512 f3327948cda6e5197bcc5ab513488c583e587b9f20b07ede84e257d9fa86c4f67045a811fcf47a35bebc1cc2fe69fa8bb682f19bd79a10a672d4e8be413e87b3
SSDEEP 12288:WBhA3SfDkVs+k3mI62ATai/QqzlFCl7yZVrLnJtZsbTTeIhcUqeLYqDRY:giifDk0/AT71Cl7UpsX2Uqoll
TLSH
T19F059E02B6D18471F192017A0A3BF77E6E3DB1105B25C9C7C3E4D99859622E2EA3F35E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

839680

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ClearCommBreak CloseHandle CompareStringW ConnectNamedPipe CreateEventA CreateFileA CreateFileMappingA CreateFileW CreateMutexA CreateNamedPipeA CreatePipe CreateProcessA CreateThread DecodePointer DeleteCriticalSection DeleteFileA EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess FindClose FindFirstFileA FindFirstFileExW FindNextFileA FindNextFileW FlushFileBuffers FormatMessageA FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommState GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetEnvironmentVariableA GetFileSizeEx GetFileType GetLastError GetLocalTime GetLocaleInfoW GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetOverlappedResult GetProcAddress GetProcessHeap GetProcessTimes GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryA GetSystemTimeAsFileTime GetThreadTimes GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetWindowsDirectoryA GlobalMemoryStatus HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadLibraryExW LocalAlloc LocalFileTimeToFileTime LocalFree MapViewOfFile MultiByteToWideChar OpenProcess OutputDebugStringW QueryPerformanceCounter RaiseException ReadConsoleW ReadFile ReleaseMutex RtlUnwind SetCommBreak SetCommState SetCommTimeouts SetConsoleMode SetEndOfFile SetEnvironmentVariableW SetEvent SetFilePointerEx SetHandleInformation SetLastError SetStdHandle SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter UnmapViewOfFile WaitForMultipleObjects WaitForSingleObject WaitNamedPipeA WideCharToMultiByte WriteConsoleW WriteFile

user32

FindWindowA GetCapture GetClipboardOwner GetCursorPos GetForegroundWindow GetQueueStatus SendMessageA

advapi32

AllocateAndInitializeSid CopySid EqualSid GetLengthSid GetUserNameA InitializeSecurityDescriptor RegCloseKey RegCreateKeyExA RegEnumKeyA RegOpenKeyA RegOpenKeyExA RegQueryValueExA RegSetValueExA SetSecurityDescriptorDacl SetSecurityDescriptorOwner

Name

.text

Size

591KB

Virtual Size

591KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

167KB

Virtual Size

166KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.voltbl

Size

512B

Virtual Size

156B

Characteristics

Name

.rsrc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-04_66485eff8025b0f99c18f61c0f8c7bc4_amadey_cobalt-strike_darkgate_elex_glassworm_luca-stealer_lynx_njrat

kernel32

user32

advapi32

generic