2026-08-04_bc78139c89ab2edba4ebd746acf40415_amadey_avoslocker_darkgate_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-04_bc78139c89ab2edba4ebd746acf40415_amadey_avoslocker_darkgate_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader
Size 14.0MB
Sample260804-rp3ntaserb
SHA256 98d62f66c8f6a674ae37170146df071f126e4497044e846e4bda546f69150670
MD5 bc78139c89ab2edba4ebd746acf40415
SHA1 6c529419a907aafe4b724a4084e2950b2d741f24
SHA512 7301f60316e5bad00bcdebb20a41001bbeac5ab6a5dea170f7f87b322a8938b5f6b802d02a5ff3e5633a3f9f1f564d1a2513641f240bf60b0dbc079859659671
SSDEEP 196608:9RNx/jIaZaDFKcce8mdxuWVEynt+IieaAw9Cv19sK8ktRGif7jIUP6riJy2HHs8P:b6FGXyntIey9+195f7jxPBJy2HHcFK
TLSH
T105E6E041B68BCA36E14910700C68E7BEEE7ADDB1072744CBE2903E68BC717D1653BE56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_bc78139c89ab2edba4ebd746acf40415_amadey_avoslocker_darkgate_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader

File Explorer

2026-08-04_bc78139c89ab2edba4ebd746acf40415_amadey_avoslocker_darkgate_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader

.exe 14.0MB

2026-08-04_bc78139c89ab2edba4ebd746acf40415_amadey_avoslocker_darkgate_elex_glassworm_luca-stealer_lynx_njrat_smoke-loader

IMPHASH f4d2fc063022195d947b8535fa6be977
SHA256 98d62f66c8f6a674ae37170146df071f126e4497044e846e4bda546f69150670
MD5 bc78139c89ab2edba4ebd746acf40415
SHA1 6c529419a907aafe4b724a4084e2950b2d741f24
SHA512 7301f60316e5bad00bcdebb20a41001bbeac5ab6a5dea170f7f87b322a8938b5f6b802d02a5ff3e5633a3f9f1f564d1a2513641f240bf60b0dbc079859659671
SSDEEP 196608:9RNx/jIaZaDFKcce8mdxuWVEynt+IieaAw9Cv19sK8ktRGif7jIUP6riJy2HHs8P:b6FGXyntIey9+195f7jxPBJy2HHcFK
TLSH
T105E6E041B68BCA36E14910700C68E7BEEE7ADDB1072744CBE2903E68BC717D1653BE56
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2391668

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

OutputDebugStringW GetStartupInfoW InitializeSListHead QueryPerformanceCounter IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter WaitForSingleObjectEx GetTempFileNameW SetErrorMode GetFileTime GetFileSizeEx SystemTimeToTzSpecificLocalTime GetProfileIntW GetTempPathW FreeLibraryAndExitThread GetWindowsDirectoryW FindResourceExW lstrcmpiW DuplicateHandle UnlockFile SetEndOfFile GetFullPathNameW LCMapStringEx GetFileSize VerifyVersionInfoW VerSetConditionMask GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW LocalReAlloc LocalAlloc GlobalHandle TlsFree TlsSetValue TlsGetValue TlsAlloc GlobalGetAtomNameW lstrcpyW GetThreadLocale GetPrivateProfileIntW CompareStringA lstrcmpA GetCurrentThread FormatMessageW CompareStringW GlobalFindAtomW GlobalAddAtomW lstrcmpW GlobalDeleteAtom LoadLibraryExW EncodePointer OutputDebugStringA FormatMessageA LocalFree GetStringTypeW GetCPInfo InitializeCriticalSectionEx FlushFileBuffers RtlUnwind HeapQueryInformation QueryPerformanceFrequency SetStdHandle GetFileType GetStdHandle GetConsoleCP GetConsoleMode ReadConsoleW LCMapStringW IsValidLocale EnumSystemLocalesW FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW WriteConsoleW GetVolumeInformationW SetCommConfig SetCommTimeouts SetCommMask GetOverlappedResult ClearCommError GetCommState WaitCommEvent EscapeCommFunction PurgeComm GetCommConfig GetSystemTimeAsFileTime GetLocalTime FileTimeToLocalFileTime FileTimeToSystemTime ResetEvent GetExitCodeProcess GenerateConsoleCtrlEvent VirtualQuery CopyFileW GetModuleHandleW CreateProcessW GetCurrentProcessId SetCurrentDirectoryW GetCurrentDirectoryW GetSystemInfo DeleteFileW GlobalFlags GetFileAttributesExW OpenProcess GetSystemDirectoryW GetVersionExW GetFileAttributesW FindClose PeekNamedPipe CreatePipe TerminateProcess GetCurrentProcess FindNextFileW GetCommandLineW SetLastError FindFirstFileW CreateDirectoryW SetFilePointerEx CreateFileW LockFile WriteFile ReadFile FreeLibrary LoadLibraryW GetUserDefaultLCID FreeResource GlobalReAlloc MulDiv GlobalSize IsDebuggerPresent CreateEventW ResumeThread SetThreadPriority GetCommandLineA GetModuleHandleExW ExitThread CreateThread WaitForSingleObject SetEvent SetFilePointer CloseHandle GetModuleFileNameW WritePrivateProfileStringW GetPrivateProfileStringW GetTimeZoneInformation GetTickCount FindResourceW LoadResource LockResource SizeofResource VirtualFree VirtualAlloc VirtualProtect GetProcAddress LoadLibraryA GetModuleHandleA GlobalUnlock GlobalLock HeapFree GlobalFree GlobalAlloc GetCurrentThreadId ExitProcess Sleep MultiByteToWideChar WideCharToMultiByte TryEnterCriticalSection GetProcessHeap DeleteCriticalSection DecodePointer HeapAlloc RaiseException HeapReAlloc GetLastError HeapSize InitializeCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount EnterCriticalSection SearchPathW

user32

SetLayeredWindowAttributes InvalidateRect SendMessageW FindWindowExW EnumDisplaySettingsW RedrawWindow WinHelpW EnableWindow GetRawInputDeviceList SystemParametersInfoW LoadCursorW CallNextHookEx GetWindowLongW SetWindowLongW UnregisterClassW ChangeDisplaySettingsW DispatchMessageW MapVirtualKeyA UnhookWindowsHookEx TranslateMessage SetWindowsHookExW SendInput IsZoomed SetRect GetSystemMenu CallWindowProcW SetWindowRgn FillRect ScreenToClient MessageBeep WindowFromPoint GetScrollPos DrawIcon OffsetRect GetCapture GetScrollRange CopyRect GetDlgCtrlID ClientToScreen IsChild GetTopWindow SetMenu LoadBitmapW IsRectEmpty IntersectRect GetClassNameW SetParent SetCapture SetScrollRange KillTimer SetScrollPos PtInRect ReleaseCapture IsIconic GetNextDlgTabItem DestroyIcon GetSysColor wsprintfW ModifyMenuW GetMenu GetMenuItemCount DeleteMenu CreatePopupMenu TrackPopupMenu GetSubMenu DestroyAcceleratorTable CreateAcceleratorTableW DestroyMenu TranslateAcceleratorW InsertMenuW CheckMenuItem AppendMenuW EnableMenuItem CreateMenu GetWindowThreadProcessId IsWindowVisible MonitorFromWindow WaitForInputIdle OpenClipboard GetMonitorInfoW CloseClipboard EmptyClipboard IsWindowEnabled MoveWindow SetClipboardData UpdateWindow DeferWindowPos CopyImage DefWindowProcW PostMessageW DestroyWindow GetPropW CreateWindowExW RemovePropW LoadStringW GetActiveWindow GetClassInfoW SetTimer RegisterClassW SetPropW LoadIconW GetDesktopWindow LoadImageW GetDC GetSystemMetrics GetWindowDC GetClientRect ReleaseDC PeekMessageW AdjustWindowRectEx ShowWindow GetWindow SetCursor GetKeyState SetActiveWindow SetWindowPos SetFocus IsWindow RegisterWindowMessageW GetMessagePos GetMessageTime GetClassInfoExW IsMenu GetWindowPlacement SetWindowPlacement BeginDeferWindowPos SetForegroundWindow EndDeferWindowPos GetDlgItem GetMenuItemID GetForegroundWindow BeginPaint EndPaint ValidateRect ScrollWindow ShowScrollBar GetWindowTextW GetWindowTextLengthW MapWindowPoints EqualRect GetClassLongW GetLastActivePopup SetScrollInfo GetScrollInfo GetMenuStringW GetMenuState RemoveMenu DrawTextW DrawTextExW GrayStringW TabbedTextOutW CheckDlgButton SetWindowTextW IsDialogMessageW SetMenuItemBitmaps GetMenuCheckMarkDimensions SetMenuItemInfoW LoadMenuW GetKeyNameTextW MapVirtualKeyW CreateDialogIndirectParamW EndDialog RegisterClipboardFormatW SetWindowContextHelpId MapDialogRect PostQuitMessage GetMessageW ShowOwnedPopups CharNextW DrawFocusRect NotifyWinEvent SendDlgItemMessageA SetRectEmpty GetMenuItemInfoW InflateRect MonitorFromPoint GetSysColorBrush RealChildWindowFromPoint GetAsyncKeyState BringWindowToTop LoadAcceleratorsW InsertMenuItemW UnpackDDElParam ReuseDDElParam EnumDisplayMonitors DrawStateW TrackMouseEvent CharUpperW PostThreadMessageW WaitMessage ToUnicodeEx GetKeyboardLayout GetKeyboardState CopyAcceleratorTableW EnumChildWindows LockWindowUpdate SetClassLongW InvalidateRgn GetNextDlgGroupItem DrawEdge DrawFrameControl DrawIconEx UnionRect GetIconInfo GetMenuDefaultItem CharUpperBuffW UpdateLayeredWindow EnableScrollBar SetMenuDefaultItem CopyIcon FrameRect IsClipboardFormatAvailable DrawMenuBar DefFrameProcW DefMDIChildProcW TranslateMDISysAccel IsCharLowerW MapVirtualKeyExW SubtractRect GetUpdateRect HideCaret InvertRect GetDoubleClickTime DestroyCursor GetComboBoxInfo GetWindowRgn MessageBoxW GetFocus GetParent GetWindowRect SetCursorPos GetCursorPos

gdi32

GetBoundsRect FrameRgn FillRgn SetPaletteEntries ExtFloodFill LPtoDP GetPaletteEntries GetNearestPaletteIndex EnumFontFamiliesExW Polyline Polygon CreatePolygonRgn OffsetRgn GetRgnBox GetTextCharsetInfo EnumFontFamiliesW PtInRegion CreateDIBitmap DPtoLP SetRectRgn GetMapMode GetTextFaceW GetBkColor CreateRectRgnIndirect ScaleWindowExtEx ScaleViewportExtEx OffsetWindowOrgEx OffsetViewportOrgEx SetWindowOrgEx SetWindowExtEx SetViewportOrgEx SetViewportExtEx ExtTextOutW TextOutW MoveToEx SetTextAlign SetROP2 SetPolyFillMode GetLayout SetLayout SetMapMode GetTextColor SetPixelV SetBkMode GetWindowExtEx SetPixel CreateHatchBrush GetWindowOrgEx CreatePatternBrush GetPixel CreateRectRgn CreateBitmap CombineRgn GetViewportOrgEx PatBlt CreateRoundRectRgn GetTextMetricsW CreatePen Rectangle Ellipse CreateSolidBrush CreateEllipticRgn ExtSelectClipRgn SelectClipRgn SaveDC RestoreDC RectVisible PtVisible LineTo IntersectClipRect GetViewportExtEx GetObjectType GetClipBox ExcludeClipRect Escape CreateDCW CopyMetaFileW SetTextColor SetBkColor RoundRect GetTextExtentPoint32W BitBlt CreateCompatibleBitmap SelectObject CreateDIBSection SetDIBColorTable CreateCompatibleDC GdiAlphaBlend StretchBlt RealizePalette GetStockObject GetDIBits GetDeviceCaps GetSystemPaletteEntries SelectPalette CreatePalette GetObjectW SetStretchBltMode CreateFontIndirectW DeleteObject DeleteDC

advapi32

RegQueryValueExW RegSetValueExW RegCreateKeyExW RegQueryValueW RegCloseKey RegOpenKeyExW RegEnumValueW RegEnumKeyExW RegDeleteKeyW RegDeleteValueW RegEnumKeyW

shell32

SHGetMalloc DragQueryFileW DragFinish ShellExecuteW Shell_NotifyIconW SHGetFileInfoW SHGetDesktopFolder SHBrowseForFolderW SHGetSpecialFolderLocation SHGetPathFromIDListW SHAppBarMessage

ole32

OleInitialize OleUninitialize CoCreateGuid CoInitialize CoDisconnectObject CoGetClassObject CoRevokeClassObject OleFlushClipboard OleIsCurrentClipboard CoRegisterMessageFilter StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CreateILockBytesOnHGlobal DoDragDrop OleGetClipboard OleLockRunning OleCreateMenuDescriptor OleDestroyMenuDescriptor OleTranslateAccelerator IsAccelerator CoLockObjectExternal RegisterDragDrop RevokeDragDrop ReleaseStgMedium OleDuplicateData CoTaskMemFree CoTaskMemAlloc CreateStreamOnHGlobal CoUninitialize CoInitializeEx CoSetProxyBlanket CLSIDFromString CLSIDFromProgID CoCreateInstance CoFreeUnusedLibraries

oleaut32

SysAllocString SysAllocStringLen OleCreateFontIndirect SysFreeString LoadTypeLi VariantInit VariantCopy VariantTimeToSystemTime SystemTimeToVariantTime VarBstrFromDate VariantClear VariantChangeType SysStringLen SafeArrayDestroy

comctl32

InitCommonControlsEx ImageList_AddMasked ImageList_Create ImageList_Destroy ImageList_GetImageCount ImageList_GetIcon

hpsocket_u

SYS_GetLastError HP_Create_TcpClient HP_Destroy_TcpClient

libcrypto-1_1

EVP_MD_CTX_free EVP_CIPHER_CTX_new EVP_CipherUpdate EVP_CipherInit_ex EVP_CIPHER_CTX_set_padding EVP_DigestFinal_ex EVP_CIPHER_CTX_free EVP_md5 EVP_rc4 EVP_DigestInit_ex EVP_MD_CTX_new CONF_modules_unload OPENSSL_init_crypto EVP_DigestUpdate

libcurl

curl_global_init curl_global_cleanup curl_easy_setopt curl_easy_init curl_easy_escape curl_free curl_easy_getinfo curl_easy_cleanup curl_slist_append curl_easy_pause curl_mime_free curl_mime_type curl_mime_name curl_mime_filename curl_mime_filedata curl_mime_addpart curl_mime_init curl_slist_free_all curl_easy_perform

setupapi

SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInterfaces SetupDiOpenDevRegKey SetupDiGetDeviceRegistryPropertyW SetupDiGetClassDevsW SetupDiGetDeviceInterfaceDetailW

winmm

PlaySoundW timeGetTime

msimg32

TransparentBlt AlphaBlend

shlwapi

PathRemoveFileSpecW PathIsUNCW PathStripToRootW StrFormatKBSizeW PathFindExtensionW PathFindFileNameW

uxtheme

OpenThemeData CloseThemeData DrawThemeBackground GetThemePartSize IsAppThemed GetWindowTheme DrawThemeText DrawThemeParentBackground GetThemeColor GetCurrentThemeName IsThemeBackgroundPartiallyTransparent GetThemeSysColor

oledlg

OleUIBusyW

gdiplus

GdipAlloc GdipDrawImageRectI GdipGetImagePixelFormat GdipFree GdipGetImageGraphicsContext GdipDeleteGraphics GdipGetImagePalette GdipSetCompositingMode GdipCreateBitmapFromFile GdipCreateBitmapFromScan0 GdipBitmapUnlockBits GdipBitmapLockBits GdipGetImageHeight GdipGetImageWidth GdipDisposeImage GdipCreateBitmapFromStream GdiplusStartup GdiplusShutdown GdipCreateFromHDC GdipCreateBitmapFromHBITMAP GdipCloneImage GdipDrawImageI GdipGetImagePaletteSize GdipSetInterpolationMode

ws2_32

WSACleanup gethostname WSAStartup

iphlpapi

GetAdaptersInfo

oleacc

CreateStdAccessibleObject LresultFromObject AccessibleObjectFromWindow

imm32

ImmGetContext ImmReleaseContext ImmGetOpenStatus

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

??0?$has_slots@Vmulti_threaded_local@sigslot@@@sigslot@@QAE@ABV01@@Z ??0?$has_slots@Vmulti_threaded_local@sigslot@@@sigslot@@QAE@XZ ??0CSerialPort@itas109@@QAE@ABV01@@Z ??0CSerialPort@itas109@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0CSerialPort@itas109@@QAE@XZ ??0CSerialPortInfo@itas109@@QAE@XZ ??1?$has_slots@Vmulti_threaded_local@sigslot@@@sigslot@@UAE@XZ ??1CSerialPort@itas109@@UAE@XZ ??1CSerialPortInfo@itas109@@QAE@XZ ??4?$has_slots@Vmulti_threaded_local@sigslot@@@sigslot@@QAEAAV01@ABV01@@Z ??4CSerialPort@itas109@@QAEAAV01@ABV01@@Z ??4CSerialPortInfo@itas109@@QAEAAV01@ABV01@@Z ??_7?$has_slots@Vmulti_threaded_local@sigslot@@@sigslot@@6B@ ??_7CSerialPort@itas109@@6B@ ?availablePortInfos@CSerialPortInfo@itas109@@SA?AV?$vector@USerialPortInfo@@V?$allocator@USerialPortInfo@@@std@@@std@@XZ ?clearError@CSerialPort@itas109@@QAEXXZ ?close@CSerialPort@itas109@@QAEXXZ ?disconnect_all@?$has_slots@Vmulti_threaded_local@sigslot@@@sigslot@@QAEXXZ ?getBaudRate@CSerialPort@itas109@@QBEHXZ ?getDataBits@CSerialPort@itas109@@QBE?AW4DataBits@2@XZ ?getFlowControl@CSerialPort@itas109@@QBE?AW4FlowControl@2@XZ ?getLastError@CSerialPort@itas109@@QBEHXZ ?getParity@CSerialPort@itas109@@QBE?AW4Parity@2@XZ ?getPortName@CSerialPort@itas109@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?getReadBufferSize@CSerialPort@itas109@@QBE_JXZ ?getStopBits@CSerialPort@itas109@@QBE?AW4StopBits@2@XZ ?getVersion@CSerialPort@itas109@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?init@CSerialPort@itas109@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HW4Parity@2@W4DataBits@2@W4StopBits@2@W4FlowControl@2@_J@Z ?isOpened@CSerialPort@itas109@@QAE_NXZ ?onReadReady@CSerialPort@itas109@@QAEXXZ ?open@CSerialPort@itas109@@QAE_NXZ ?readAllData@CSerialPort@itas109@@QAEHPAD@Z ?readData@CSerialPort@itas109@@QAEHPADH@Z ?readLineData@CSerialPort@itas109@@QAEHPADH@Z ?setBaudRate@CSerialPort@itas109@@QAEXH@Z ?setDataBits@CSerialPort@itas109@@QAEXW4DataBits@2@@Z ?setDebugModel@CSerialPort@itas109@@QAEX_N@Z ?setDtr@CSerialPort@itas109@@QAEX_N@Z ?setFlowControl@CSerialPort@itas109@@QAEXW4FlowControl@2@@Z ?setMinByteReadNotify@CSerialPort@itas109@@QAEXI@Z ?setOperateMode@CSerialPort@itas109@@QAEXW4OperateMode@2@@Z ?setParity@CSerialPort@itas109@@QAEXW4Parity@2@@Z ?setPortName@CSerialPort@itas109@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?setReadBufferSize@CSerialPort@itas109@@QAEX_J@Z ?setReadTimeInterval@CSerialPort@itas109@@QAEXH@Z ?setRts@CSerialPort@itas109@@QAEX_N@Z ?setStopBits@CSerialPort@itas109@@QAEXW4StopBits@2@@Z ?signal_connect@?$has_slots@Vmulti_threaded_local@sigslot@@@sigslot@@QAEXPAV?$_signal_base@Vmulti_threaded_local@sigslot@@@2@@Z ?signal_disconnect@?$has_slots@Vmulti_threaded_local@sigslot@@@sigslot@@QAEXPAV?$_signal_base@Vmulti_threaded_local@sigslot@@@2@@Z ?writeData@CSerialPort@itas109@@QAEHPBDH@Z _libiconv_version iconv_canonicalize libiconv libiconv_close libiconv_open libiconv_open_into libiconvctl libiconvlist locale_charset

generic

count=32, id=259, version=26715,

count=5, id=253, version=28518,

count=209, id=261, version=26715,

count=20, id=260, version=30034,

count=27, id=259, version=30034,

count=397, id=261, version=30034,

count=29, id=260, version=30154,

count=2, id=257, productName=VS2019 v16.10.0 build 30037, version=30037,

count=2, id=257, productName=VS2019 v16.9.4 build 29914, version=29914,

count=2, id=257, productName=VS2019 v16.10.3 build 30038, version=30038,

count=39, id=260, version=26715,

count=4, id=262, version=26715,

count=41, id=257, version=26715,

count=936, id=1, productName=Unmarked objects,

count=63, id=265, version=30151,

count=1, id=256, version=30151,

count=1, id=255, version=30151,

count=1, id=151,

count=1, id=258, version=30151,