2026-08-09_f4de1b1a28a1a5c0ea4323aedfd994b8_amadey_darkgate_elex_floxif_luca-stealer_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-09_f4de1b1a28a1a5c0ea4323aedfd994b8_amadey_darkgate_elex_floxif_luca-stealer_njrat_smoke-loader
Size 5.8MB
Sample260809-fb7vtshl9s
SHA256 4d8b4493c2ad1768951dccbd989a34945445683622571068358ad58131d9baf0
MD5 f4de1b1a28a1a5c0ea4323aedfd994b8
SHA1 ee06b583a948fb18c9f090442068e8bdcb22edcb
SHA512 21f4d89b1840c2be7d7945f2dcf920a37472f10dd04abf7555bc540264c81fc3ca0910648a7ad39414570234a8b893435556a97bd05781b6692322b85d82acf9
SSDEEP 98304:12ZeImjyh5+CLl7tnuAfs0uzt5xz6giQNpfP7GPRFyNku4ZUtWMFgtSy:12ZT5+ulJnVuvxGgiQNlaSiu4ZUtWqgj
TLSH
T1AD56CF42FBC291F5FBD21072111BB33A5ABA9A004736DCDBD7902D69AC312D2673935E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_f4de1b1a28a1a5c0ea4323aedfd994b8_amadey_darkgate_elex_floxif_luca-stealer_njrat_smoke-loader

File Explorer

2026-08-09_f4de1b1a28a1a5c0ea4323aedfd994b8_amadey_darkgate_elex_floxif_luca-stealer_njrat_smoke-loader

.exe 5.8MB

2026-08-09_f4de1b1a28a1a5c0ea4323aedfd994b8_amadey_darkgate_elex_floxif_luca-stealer_njrat_smoke-loader

IMPHASH 0bff72f24d943ea74733ffe46ab989a0
SHA256 4d8b4493c2ad1768951dccbd989a34945445683622571068358ad58131d9baf0
MD5 f4de1b1a28a1a5c0ea4323aedfd994b8
SHA1 ee06b583a948fb18c9f090442068e8bdcb22edcb
SHA512 21f4d89b1840c2be7d7945f2dcf920a37472f10dd04abf7555bc540264c81fc3ca0910648a7ad39414570234a8b893435556a97bd05781b6692322b85d82acf9
SSDEEP 98304:12ZeImjyh5+CLl7tnuAfs0uzt5xz6giQNpfP7GPRFyNku4ZUtWMFgtSy:12ZT5+ulJnVuvxGgiQNlaSiu4ZUtWqgj
TLSH
T1AD56CF42FBC291F5FBD21072111BB33A5ABA9A004736DCDBD7902D69AC312D2673935E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2126197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AreFileApisANSI CloseHandle CompareStringW CopyFileW CreateDirectoryW CreateEventA CreateFileA CreateFileMappingW CreateFileW CreateMutexW CreatePipe CreateProcessW CreateSemaphoreW CreateThread DecodePointer DeleteCriticalSection DeleteFileA DeleteFileW DuplicateHandle EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExitThread FileTimeToSystemTime FindClose FindFirstFileExW FindFirstFileW FindNextFileW FlushFileBuffers FlushViewOfFile FormatMessageA FormatMessageW FreeEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDiskFreeSpaceA GetDiskFreeSpaceW GetDriveTypeW GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesA GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetFileSize GetFileSizeEx GetFileType GetFullPathNameA GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoW GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessAffinityMask GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemInfo GetSystemTime GetSystemTimeAsFileTime GetTempPathA GetTempPathW GetTickCount GetTimeZoneInformation GetUserDefaultLCID GetUserDefaultLangID GetVersionExW GlobalAlloc GlobalFree GlobalHandle GlobalLock GlobalSize GlobalUnlock HeapAlloc HeapCompact HeapCreate HeapDestroy HeapFree HeapReAlloc HeapSize HeapValidate InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadLibraryW LocalFree LockFile LockFileEx MapViewOfFile MulDiv MultiByteToWideChar OpenProcess OutputDebugStringA OutputDebugStringW PeekNamedPipe QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleW ReadFile RegisterWaitForSingleObject ReleaseSemaphore RemoveDirectoryW ResetEvent RtlUnwind SetCurrentDirectoryW SetEndOfFile SetEnvironmentVariableW SetEvent SetFileAttributesW SetFilePointer SetFilePointerEx SetLastError SetPriorityClass SetProcessAffinityMask SetStdHandle SetThreadPriority SetUnhandledExceptionFilter Sleep SystemTimeToFileTime TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection UnhandledExceptionFilter UnlockFile UnlockFileEx UnmapViewOfFile UnregisterWait VerSetConditionMask VerifyVersionInfoW VirtualQuery WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW WriteFile lstrcpyA lstrcpynA

user32

AdjustWindowRectEx AppendMenuW BeginPaint CallWindowProcW CharLowerW CharUpperW ClientToScreen CloseClipboard CopyImage CreateAcceleratorTableW CreateIconFromResource CreateIconFromResourceEx CreatePopupMenu CreateWindowExW DefFrameProcW DefWindowProcW DestroyAcceleratorTable DestroyIcon DestroyMenu DestroyWindow DispatchMessageW DrawFocusRect DrawFrameControl DrawIconEx DrawStateW DrawTextW EmptyClipboard EnableMenuItem EnableWindow EndPaint EnumChildWindows EnumDisplaySettingsW EnumPropsExW EnumWindows FillRect FrameRect GetActiveWindow GetAsyncKeyState GetCapture GetClassNameW GetClientRect GetClipboardData GetCursorPos GetDC GetDlgCtrlID GetFocus GetForegroundWindow GetIconInfo GetKeyState GetMenu GetMenuItemCount GetMenuItemInfoW GetMessagePos GetMessageW GetNextDlgTabItem GetParent GetPropW GetScrollPos GetSysColor GetSysColorBrush GetSystemMetrics GetWindow GetWindowDC GetWindowLongW GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId InflateRect IntersectRect InvalidateRect IsChild IsIconic IsWindow IsWindowEnabled IsWindowVisible IsZoomed KillTimer LoadCursorW LoadIconW MapWindowPoints MessageBoxW MoveWindow MsgWaitForMultipleObjects OemToCharW OpenClipboard PeekMessageW PostMessageW RedrawWindow RegisterClassExW RegisterClassW RegisterHotKey RegisterWindowMessageW ReleaseCapture ReleaseDC RemovePropW ScreenToClient SendMessageW SetActiveWindow SetCapture SetClassLongW SetClipboardData SetCursor SetFocus SetForegroundWindow SetMenu SetMenuItemBitmaps SetParent SetPropW SetRect SetScrollPos SetTimer SetWindowLongW SetWindowPos SetWindowTextW ShowWindow SystemParametersInfoW TrackPopupMenu TranslateAcceleratorW TranslateMessage UnregisterClassW UpdateWindow ValidateRect WindowFromPoint wsprintfA

advapi32

RegCloseKey RegConnectRegistryW RegOpenKeyExW RegOpenKeyW RegQueryValueExW SystemFunction036

ole32

CoCreateInstance CoInitialize CoUninitialize DoDragDrop OleInitialize OleUninitialize RegisterDragDrop ReleaseStgMedium RevokeDragDrop

uxtheme

CloseThemeData DrawThemeBackground DrawThemeParentBackground GetThemeBackgroundContentRect IsAppThemed IsThemeBackgroundPartiallyTransparent OpenThemeData SetWindowTheme

wininet

HttpAddRequestHeadersW HttpEndRequestW HttpOpenRequestW HttpSendRequestW InternetCloseHandle InternetConnectW InternetOpenW InternetReadFile InternetSetOptionW

comctl32

ImageList_Add ImageList_AddMasked ImageList_Create ImageList_Destroy ImageList_GetIconSize ImageList_Remove ImageList_Replace ImageList_ReplaceIcon InitCommonControlsEx

comdlg32

GetOpenFileNameW GetSaveFileNameW

shell32

DragQueryFileW ShellExecuteExW Shell_NotifyIconW

ws2_32

WSACleanup WSAStartup closesocket

gdi32

BitBlt CreateBitmap CreateCompatibleBitmap CreateCompatibleDC CreateDCW CreateDIBSection CreateFontIndirectW CreateFontW CreatePatternBrush CreatePen CreateRectRgn CreateRectRgnIndirect CreateSolidBrush DeleteDC DeleteObject ExcludeClipRect ExtSelectClipRgn GdiGetBatchLimit GdiSetBatchLimit GetClipRgn GetDIBits GetDeviceCaps GetObjectType GetObjectW GetPixel GetStockObject GetTextExtentPoint32W GetTextMetricsW LineTo MoveToEx OffsetViewportOrgEx SelectClipRgn SelectObject SetBkColor SetBkMode SetBrushOrgEx SetPixel SetStretchBltMode SetTextAlign SetTextColor SetViewportOrgEx StretchBlt TextOutW

winmm

timeBeginPeriod

shlwapi

PathFileExistsW

gdiplus

GdipDeleteFont GdipDeleteGraphics GdipDeleteMatrix GdipDeletePath GdipDeletePen GdipDeleteStringFormat GdipFree

Name

.text

Size

2.0MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

284KB

Virtual Size

284KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3.2MB

Virtual Size

3.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.eh_fram

Size

49KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.modplug

Size

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

68KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

70KB

Virtual Size

69KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_f4de1b1a28a1a5c0ea4323aedfd994b8_amadey_darkgate_elex_floxif_luca-stealer_njrat_smoke-loader

kernel32

user32

advapi32

ole32

uxtheme

wininet

comctl32

comdlg32

shell32

ws2_32

gdi32

winmm

shlwapi

gdiplus

generic