2026-08-07_715617faf9b8fa6c3d450e9327eac0b2_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_wapomi

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-07_715617faf9b8fa6c3d450e9327eac0b2_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_wapomi
Size 7.2MB
Sample260807-kdfxcaeg79
SHA256 33e3174dcea993093a7b97db6cc2d3328daea19268fdabd7a2203123265add62
MD5 715617faf9b8fa6c3d450e9327eac0b2
SHA1 235fb0457d37456b830a3649dde2a46e38df9146
SHA512 c3a80b80e792f3885e0b26ad6ae05d34796dd2ce19b2c02471c6b8c0d64821e2110da3e412db0eba1b02e5737b4417204636fa9afce38f202285d5cf62ea4ae3
SSDEEP 196608:BiYRla/5rvEscuS8KSir6QGz0HshnybNSCIeG8GTBb7weS+esoYM:25rnGIeG8GTBbteH
TLSH
T11B76BE10F991E022E4E101B156AEB7E615783F350F2085E767803BBE7DB4AD3993276B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-07_715617faf9b8fa6c3d450e9327eac0b2_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_wapomi

File Explorer

2026-08-07_715617faf9b8fa6c3d450e9327eac0b2_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_wapomi

.exe 7.2MB

2026-08-07_715617faf9b8fa6c3d450e9327eac0b2_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_wapomi

IMPHASH 96c056e63e095716e2a1eaf1f87149d9
SHA256 33e3174dcea993093a7b97db6cc2d3328daea19268fdabd7a2203123265add62
MD5 715617faf9b8fa6c3d450e9327eac0b2
SHA1 235fb0457d37456b830a3649dde2a46e38df9146
SHA512 c3a80b80e792f3885e0b26ad6ae05d34796dd2ce19b2c02471c6b8c0d64821e2110da3e412db0eba1b02e5737b4417204636fa9afce38f202285d5cf62ea4ae3
SSDEEP 196608:BiYRla/5rvEscuS8KSir6QGz0HshnybNSCIeG8GTBb7weS+esoYM:25rnGIeG8GTBbteH
TLSH
T11B76BE10F991E022E4E101B156AEB7E615783F350F2085E767803BBE7DB4AD3993276B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14938112

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\（◆開発用ディレクトリ）\[▼作業用]プログラム\RPGドライブプログラム-VS2022用\Release\Game - Pro版.pdb

shlwapi

PathIsDirectoryW PathFileExistsW PathIsDirectoryA

psapi

GetProcessMemoryInfo

kernel32

FindNextFileA FindClose GetCurrentDirectoryA GetACP SetCurrentDirectoryA GetFileAttributesA CreateFileA CloseHandle CreateDirectoryA GetTickCount GetModuleFileNameW LoadLibraryW GetProcAddress FreeLibrary CreateDirectoryW GetModuleFileNameA FindFirstFileW FindNextFileW WriteFile InitializeCriticalSectionAndSpinCount WaitForSingleObject GetModuleHandleA GetLocaleInfoA OpenProcess GetExitCodeThread Sleep CopyFileA GetLastError GetVersionExA DeleteFileA GlobalAlloc GetCurrentDirectoryW DecodePointer SetCurrentDirectoryW GlobalLock RemoveDirectoryA GetCurrentProcessId GlobalMemoryStatusEx CopyFileW WideCharToMultiByte GetDiskFreeSpaceExA GlobalUnlock FlushFileBuffers TlsAlloc WriteConsoleW SetEndOfFile HeapSize HeapReAlloc SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage FindFirstFileExW GetTimeZoneInformation GetFileAttributesExW ReadConsoleW SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW FindFirstFileA MultiByteToWideChar DeleteCriticalSection SetLastError RtlUnwind RaiseException OutputDebugStringW HeapAlloc HeapFree GetStdHandle MoveFileExW FreeLibraryAndExitThread ExitProcess ExitThread CreateThread DeleteFileW TlsGetValue TlsSetValue GetModuleHandleExW LoadLibraryExW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx EncodePointer LocalFree LCMapStringEx GetStringTypeW GetCPInfo LoadLibraryA CreateFileW ReadFile LocalAlloc TlsFree

user32

GetScrollPos GetFocus ReleaseDC IsClipboardFormatAvailable GetDlgItem CreateDialogParamA SetClipboardData SendMessageA ClipCursor SendDlgItemMessageA GetClipboardData SetFocus GetMonitorInfoA MonitorFromPoint GetWindowRect DestroyWindow GetDC SetWindowPos MessageBoxW EnumDisplayMonitors GetSystemMetrics MessageBoxA ShowWindow GetAsyncKeyState OpenClipboard ClientToScreen CloseClipboard EmptyClipboard GetCursorPos

gdi32

RemoveFontResourceExA GetDeviceCaps AddFontResourceExW

shell32

ShellExecuteW ShellExecuteA SHGetFolderPathA

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

wininet

HttpQueryInfoA HttpOpenRequestA InternetCrackUrlA InternetOpenA InternetCloseHandle InternetConnectA InternetReadFile HttpSendRequestA

crypt32

CryptBinaryToStringA

advapi32

RegCloseKey

Name

.text

Size

4.2MB

Virtual Size

4.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

692KB

Virtual Size

692KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2.0MB

Virtual Size

9.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

136KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

169KB

Virtual Size

169KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

<��]�u�

Size

16KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-07_715617faf9b8fa6c3d450e9327eac0b2_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_wapomi

shlwapi

psapi

kernel32

user32

gdi32

shell32

version

wininet

crypt32

advapi32

generic