2026-08-09_2ed4822e7b9b41a99b6fc9db38a2ae1f_amadey_darkgate_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader

General

Target
2026-08-09_2ed4822e7b9b41a99b6fc9db38a2ae1f_amadey_darkgate_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
Size 9.7MB
Sample260809-r2ht6ssza1
SHA256 673626382af9cbf1e4b84139595ce8d2825c4f4be7c00cf6f6c229b9bfdaed94
MD5 2ed4822e7b9b41a99b6fc9db38a2ae1f
SHA1 6fdcd0b4c2403167b46e8bf1d2bc20de89e93ded
SHA512 2a6c848b7d38a83efb26cfe6b6a54979a878b92b4b6c0c736d62607e62e4b9ab7f9a50784746d0c09ecf8fc00c90a374e46135ba24fe16cea73c06eb64f1cfab
SSDEEP 196608:fa+rnmM0QVOZvsQPJkKZcA4mcTLpln1Jhhl+oPpJqsl94:fb0QVKyVmcTlln1JQIbq4m
TLSH
T1FDA612C077A6FA55EB59023101387AB8462B25313715C8EFBE971BC76C582C6AEB1D33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-08-09_2ed4822e7b9b41a99b6fc9db38a2ae1f_amadey_darkgate_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader

File Explorer

2026-08-09_2ed4822e7b9b41a99b6fc9db38a2ae1f_amadey_darkgate_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader

.exe 9.7MB

2026-08-09_2ed4822e7b9b41a99b6fc9db38a2ae1f_amadey_darkgate_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader

IMPHASH fd52d179287082c0985fdb8269c00067
SHA256 673626382af9cbf1e4b84139595ce8d2825c4f4be7c00cf6f6c229b9bfdaed94
MD5 2ed4822e7b9b41a99b6fc9db38a2ae1f
SHA1 6fdcd0b4c2403167b46e8bf1d2bc20de89e93ded
SHA512 2a6c848b7d38a83efb26cfe6b6a54979a878b92b4b6c0c736d62607e62e4b9ab7f9a50784746d0c09ecf8fc00c90a374e46135ba24fe16cea73c06eb64f1cfab
SSDEEP 196608:fa+rnmM0QVOZvsQPJkKZcA4mcTLpln1Jhhl+oPpJqsl94:fb0QVKyVmcTlln1JQIbq4m
TLSH
T1FDA612C077A6FA55EB59023101387AB8462B25313715C8EFBE971BC76C582C6AEB1D33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

93:09:84:ff:56:1f:db:2f:66:c9:af:93:3e:8a:89:df:f3:34:c6:ba:42:d8:43:0a:d2:c9:43:91:2e:94:6e:a3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=FuryWisdom,ST=Colorado,C=US

Chains

Aug 6, 2026

CN=FuryWisdom,ST=Colorado,C=US

PE Signature issue

Digest

55:cd:c2:ce:d3:fe:d8:1e:6f:52:57:1d:4d:9b:c2:99:9d:8d:91:9d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=FuryWisdom,ST=Colorado,C=US

Chains

Aug 6, 2026

CN=FuryWisdom,ST=Colorado,C=US

Minor OS version

0

Major OS version

6

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA QueryPerformanceCounter EnterCriticalSection LeaveCriticalSection DeleteCriticalSection GetCurrentProcessId GetCurrentThreadId GetTickCount FreeLibrary DecodePointer RaiseException GetLastError HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap InitializeCriticalSectionEx AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetModuleFileNameA GetModuleFileNameW LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree FormatMessageA FormatMessageW SetCurrentDirectoryA SetCurrentDirectoryW GetCurrentDirectoryA GetCurrentDirectoryW CreateDirectoryA CreateDirectoryW CreateFileW DeleteFileA DeleteFileW RemoveDirectoryA RemoveDirectoryW SetFileAttributesA SetFileAttributesW SetFileTime GetTempPathW GetTempPathA CloseHandle SetLastError GetSystemDirectoryA GetSystemDirectoryW GetWindowsDirectoryA GetProcAddress GetModuleHandleW MoveFileA MoveFileW FindClose FindCloseChangeNotification FindFirstChangeNotificationA FindFirstChangeNotificationW FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW GetFileAttributesA GetFileAttributesW GetFileInformationByHandle GetLogicalDriveStringsW GetModuleHandleA GetLogicalDriveStringsA CreateFileA GetFileSize ReadFile SetEndOfFile SetFilePointer WriteFile CompareFileTime GetCurrentProcess GetSystemInfo GlobalMemoryStatus GetProcessAffinityMask GetSystemTimeAsFileTime FileTimeToDosDateTime DosDateTimeToFileTime GetStdHandle Sleep VirtualAlloc VirtualFree IsProcessorFeaturePresent GetVersionExA lstrcatW lstrlenW InitializeCriticalSection SetEvent ResetEvent ReleaseSemaphore WaitForSingleObject CreateEventA ResumeThread SetThreadAffinityMask CreateSemaphoreA GetCommandLineW CreateProcessA SwitchToThread InitializeSListHead GetWindowsDirectoryW GetStartupInfoW GetNativeSystemInfo WriteConsoleW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindFirstFileExW ReadConsoleW SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread TlsFree TlsSetValue TlsGetValue TlsAlloc IsDebuggerPresent CreateEventW InitializeCriticalSectionAndSpinCount TerminateProcess RtlUnwind OutputDebugStringW EncodePointer LCMapStringEx GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter

user32

RegisterClassW CharUpperA DestroyWindow LoadIconA KillTimer SetTimer EndDialog PostMessageA SendMessageA MessageBoxW GetWindowTextLengthW GetWindowTextLengthA GetWindowTextW GetWindowTextA SetWindowTextW SetWindowTextA CreateWindowExW CreateWindowExA CharPrevExA RegisterClassA LoadStringW LoadStringA SystemParametersInfoA MapDialogRect SetWindowLongA GetWindowLongA ScreenToClient GetWindowRect GetDialogBaseUnits GetDlgItem DialogBoxParamW DialogBoxParamA CreateDialogParamW CreateDialogParamA MoveWindow ShowWindow CharUpperW

shell32

ShellExecuteExA

oleaut32

SysAllocString SysStringLen SysAllocStringLen VariantClear VariantCopy

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_2ed4822e7b9b41a99b6fc9db38a2ae1f_amadey_darkgate_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader

PE Signature issue

PE Signature issue

kernel32

user32

shell32

oleaut32

generic