2026-08-03_688dc271cd5dae31e26b522fccb857b4_amadey_elex_luca-stealer_magniber_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_688dc271cd5dae31e26b522fccb857b4_amadey_elex_luca-stealer_magniber_njrat
Size 10.5MB
Sample260804-nn7plaad36
SHA256 49ee01fe8fb72b5ae29a8e96ac90695f13314f59ecd2d1e2fd094dad7c505e8a
MD5 688dc271cd5dae31e26b522fccb857b4
SHA1 063b9ace91b0ffd3ac08fb08db8b9758478ccbc3
SHA512 ea6a8a211c446aef3e00c8ed858bf705e5d7e4e6b115f7e049e7fbcf7c3c0a7cdd2703856b45a4f73f810d8d088d6b8555ddfad9a44a1cf210c14f28dcf9910e
SSDEEP 196608:wfhduL1cd0VX8ldqitZXSuTZnpezcX9RPlay0SOxuoWGwU:FLWJF9poy9RPlESOiGw
TLSH
T18EB6AE11B843E071C6982171B96EBBFF563E657C1FB504D3B3E4392856B01D23AB398A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_688dc271cd5dae31e26b522fccb857b4_amadey_elex_luca-stealer_magniber_njrat

File Explorer

2026-08-03_688dc271cd5dae31e26b522fccb857b4_amadey_elex_luca-stealer_magniber_njrat

.exe 10.5MB

2026-08-03_688dc271cd5dae31e26b522fccb857b4_amadey_elex_luca-stealer_magniber_njrat

IMPHASH 74d03b7a3ecc574fe27a72427ee0f490
SHA256 49ee01fe8fb72b5ae29a8e96ac90695f13314f59ecd2d1e2fd094dad7c505e8a
MD5 688dc271cd5dae31e26b522fccb857b4
SHA1 063b9ace91b0ffd3ac08fb08db8b9758478ccbc3
SHA512 ea6a8a211c446aef3e00c8ed858bf705e5d7e4e6b115f7e049e7fbcf7c3c0a7cdd2703856b45a4f73f810d8d088d6b8555ddfad9a44a1cf210c14f28dcf9910e
SSDEEP 196608:wfhduL1cd0VX8ldqitZXSuTZnpezcX9RPlay0SOxuoWGwU:FLWJF9poy9RPlESOiGw
TLSH
T18EB6AE11B843E071C6982171B96EBBFF563E657C1FB504D3B3E4392856B01D23AB398A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8518258

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\SV_NEW_VT_5.2\1.DHT_Client\Main.pdb

imm32

ImmGetDescriptionA ImmGetCompositionWindow ImmSetConversionStatus ImmGetContext ImmGetCompositionStringA ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext ImmGetIMEFileNameA ImmGetConversionStatus ImmGetDefaultIMEWnd

dsound

ord2 ord1

opengl32

glReadPixels glNormal3fv glScalef glDrawArrays wglMakeCurrent wglDeleteContext wglCreateContext glGetString glTranslatef glRotatef glFlush glVertex2f glStencilOp glStencilFunc glFrontFace glDepthMask glDepthFunc glColorMask glColor3ub glClearColor glAlphaFunc glFogfv glFogf glTexParameterf glVertex3fv glTexCoord2f glColor3fv glTexEnvf glHint glGetFloatv glColor4fv glColor4ub glClear glColor3f glVertex3f glNormal3f glEnd glColor4f glBegin glViewport glVertexPointer glTexParameteri glTexImage2D glTexEnvi glTexCoordPointer glShadeModel glScissor glPushMatrix glTexCoord2fv glPushAttrib glPopMatrix glPopAttrib glPolygonMode glPixelStorei glOrtho glMatrixMode glLoadIdentity glGetTexEnviv glGetIntegerv glGenTextures glEnableClientState glEnable glDrawElements glDisableClientState glDisable glDeleteTextures glColorPointer glBlendFunc wglGetProcAddress glBindTexture

glu32

gluPerspective gluOrtho2D

winmm

timeBeginPeriod timeGetDevCaps mmioAscend mmioDescend mmioWrite mmioRead mmioClose timeGetTime mmioOpenA timeEndPeriod

ws2_32

getpeername htons connect WSAAsyncSelect WSAGetLastError WSACleanup WSAStartup gethostbyname socket shutdown setsockopt send recv ntohs inet_addr closesocket

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

wzaudio

wzAudioGetStreamOffsetRange wzAudioStop wzAudioDestroy wzAudioCreate wzAudioOption wzAudioPlay

glew32

__GLEW_EXT_texture_filter_anisotropic _glewInit@0 __glewGenerateMipmap

kernel32

CompareStringW GetTimeFormatW GetDateFormatW ReadConsoleW GetConsoleMode CreateProcessW GetModuleHandleExW FreeLibraryAndExitThread ResumeThread ExitThread GetTimeZoneInformation LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount InterlockedFlushSList InterlockedPushEntrySList RaiseException RtlUnwind GetStartupInfoW InitializeSListHead UnhandledExceptionFilter IsProcessorFeaturePresent WakeAllConditionVariable GetCPInfo CompareStringEx LCMapStringEx DecodePointer EncodePointer GetLocaleInfoEx LocalFree GetLocaleInfoW LeaveCriticalSection EnterCriticalSection GetUserDefaultLCID EnumSystemLocalesW GetFileType CreateSymbolicLinkW GetFileInformationByHandleEx CloseThreadpoolWait SetThreadpoolWait CreateThreadpoolWait CloseThreadpoolTimer WaitForThreadpoolTimerCallbacks SetThreadpoolTimer CreateThreadpoolTimer FreeLibraryWhenCallbackReturns GetSystemTimeAsFileTime GetCurrentProcessorNumber FlushProcessWriteBuffers CreateSemaphoreExW CreateEventExW InitOnceExecuteOnce InitializeCriticalSectionEx GetTempPathW SetFileInformationByHandle GetTickCount64 SleepConditionVariableSRW TryAcquireSRWLockShared TryAcquireSRWLockExclusive AcquireSRWLockShared AcquireSRWLockExclusive ReleaseSRWLockShared ReleaseSRWLockExclusive GetStringTypeW LCMapStringW DeleteCriticalSection IsValidLocale WriteConsoleW SetEndOfFile FlushFileBuffers GetConsoleOutputCP SetFilePointerEx HeapSize HeapQueryInformation GetExitCodeProcess GetFileAttributesExW CreatePipe CreateFileW DeleteFileW MoveFileExW QueryPerformanceCounter QueryPerformanceFrequency FreeLibrary GetModuleHandleA GetProcAddress LoadLibraryA MultiByteToWideChar GetLocaleInfoA GlobalAlloc GlobalUnlock GlobalLock GlobalFree WideCharToMultiByte DeleteFileA GetPrivateProfileStringA GetTickCount GetCurrentThreadId CreateFileA GetFileSize ReadFile IsDebuggerPresent CloseHandle WaitForSingleObject Sleep ExitProcess CreateThread SetThreadPriority SetProcessMitigationPolicy VirtualQuery GetLocalTime GetPrivateProfileIntA lstrlenA CreateDirectoryA RemoveDirectoryA SetFileAttributesA WriteFile GetLastError CreateProcessA WritePrivateProfileStringA GetCurrentThread GetThreadContext IsBadReadPtr MapViewOfFile UnmapViewOfFile CreateFileMappingA SetUnhandledExceptionFilter GetCurrentProcessId GetModuleFileNameA GlobalMemoryStatus lstrcpynA CreateToolhelp32Snapshot Process32First Process32Next Module32First Module32Next FileTimeToLocalFileTime FindClose FindFirstFileA FindNextFileA GetFileAttributesA GetFullPathNameA FileTimeToSystemTime GetStdHandle GetCurrentProcess GetThreadPriority SetPriorityClass GetPriorityClass GetVersionExA GetProcessAffinityMask SetProcessAffinityMask GetActiveProcessorGroupCount GetActiveProcessorCount GetConsoleScreenBufferInfo GetCurrentDirectoryA DuplicateHandle ReleaseMutex CreateMutexA OpenProcess GetModuleHandleW OpenMutexA GetVolumeInformationA GetSystemInfo GetModuleFileNameW SetFilePointer GetSystemDirectoryA lstrcmpiA SetLastError AllocConsole FreeConsole SetConsoleMode FillConsoleOutputCharacterA FillConsoleOutputAttribute SetConsoleCursorPosition SetConsoleTextAttribute ReadConsoleOutputA GetConsoleTitleA SetConsoleTitleA GetCommandLineA TerminateProcess SetProcessWorkingSetSize CopyFileA GetThreadTimes LoadLibraryExA FormatMessageA GetFileSizeEx HeapAlloc HeapReAlloc HeapFree GetProcessHeap SetStdHandle SetConsoleCtrlHandler SetEnvironmentVariableW FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW OutputDebugStringW VerSetConditionMask

user32

SetProcessDPIAware MonitorFromWindow LoadCursorA ScreenToClient ClientToScreen GetCursorPos SetCursor SetCursorPos GetClientRect CheckDlgButton GetForegroundWindow IsWindowUnicode ReleaseCapture SetCapture OpenClipboard GetKeyState GetMessageExtraInfo TrackMouseEvent GetKeyboardLayout EndDialog DialogBoxParamA GetWindowThreadProcessId GetClassNameA EnumChildWindows UpdateWindow RemoveMenu GetSystemMenu DrawMenuBar SystemParametersInfoA IsDlgButtonChecked KillTimer GetCapture wvsprintfA SetWindowLongW GetWindowLongW GetCaretPos GetWindowTextW SetWindowTextW GetScrollPos SetScrollPos DestroyWindow CreateWindowExW CallWindowProcW PostMessageW ReleaseDC SendMessageW SetRect UnregisterHotKey RegisterHotKey IntersectRect GetDoubleClickTime PtInRect OffsetRect LoadIconA ShowCursor AdjustWindowRect EndPaint BeginPaint SetForegroundWindow GetSystemMetrics SetTimer ChangeDisplaySettingsA GetKeyboardLayoutNameA IsIconic ShowWindow CreateWindowExA GetClassInfoA RegisterClassA PostQuitMessage DefWindowProcA PostMessageA SendMessageA PeekMessageA DispatchMessageA TranslateMessage GetMessageA SetFocus GetAsyncKeyState GetFocus EnumWindows GetWindowTextA IsWindowVisible wsprintfA CallNextHookEx UnhookWindowsHookEx SetWindowsHookExA GetDesktopWindow MessageBoxA GetWindowRect SetWindowPos EmptyClipboard GetClipboardData SetClipboardData FindWindowA GetDC CloseClipboard

gdi32

SetPixelFormat CreateRectRgn DeleteObject GetDeviceCaps CreateFontA GetStockObject SetBkColor SetTextColor DeleteDC GetFontData SelectObject GetTextMetricsW GetTextExtentPoint32W TextOutW CreateCompatibleDC GetCurrentObject CreateDIBSection SwapBuffers ChoosePixelFormat DescribePixelFormat

advapi32

RegQueryValueExA RegCloseKey CryptGenRandom CryptReleaseContext CryptAcquireContextA RegOpenKeyExA RegSetValueExA RegCreateKeyExA

shell32

Shell_NotifyIconA ShellExecuteA

ole32

CoCreateInstance CoUninitialize CoInitialize CoInitializeEx CoSetProxyBlanket

oleaut32

SysAllocString SysFreeString GetErrorInfo VariantInit VariantChangeType SetErrorInfo VariantClear CreateErrorInfo

dwmapi

DwmGetColorizationColor DwmEnableBlurBehindWindow DwmIsCompositionEnabled

iphlpapi

GetAdaptersInfo

wininet

InternetReadFile InternetQueryDataAvailable InternetOpenA InternetCloseHandle HttpOpenRequestA FtpFindFirstFileA FtpOpenFileA HttpQueryInfoA HttpSendRequestA InternetConnectA

urlmon

URLDownloadToFileA

rpcrt4

UuidCreateSequential

dbghelp

MiniDumpWriteDump

generic

count=52, id=259, version=30795,

count=36, id=260, version=30795,

count=4, id=253, version=34321,

count=28, id=259, version=34321,

count=21, id=260, version=34321,

count=100, id=261, version=34321,

count=113, id=260, version=24241,

count=44, productName=Unmarked objects (old),

count=2, id=156, productName=VS2010 SP1 build 40219, version=40219,

count=26, id=260, version=30153,

count=31, id=260, version=31329,

count=44, id=261, version=30148,

count=2, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=1, id=11, version=8966,

count=234, id=261, version=30795,

count=41, id=257, version=30795,

count=484, id=1, productName=Unmarked objects,

count=439, id=261, version=34436,

count=1, id=256, version=34436,

count=1, id=255, version=34436,

count=1, id=151,

count=1, id=258, version=34436,