2026-08-10_eadfb473f90c987c5c38b9b91912946e_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_eadfb473f90c987c5c38b9b91912946e_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 5.2MB
Sample260810-gffgtaec98
SHA256 69b3974ce1c0eac6c6e8a1e3dc6aadfe72f41e05327ebc5ed36de2610f101345
MD5 eadfb473f90c987c5c38b9b91912946e
SHA1 9da35693c04f4b04f39025ce84ba2830e36dc628
SHA512 5de38c768ee5ef94744cb5d26bcbd5446754151db9ada278c4475cae007f64d0ff7f540371275c1a3fb2b3518af900733ec6aed254bf74b12d4d1d7926aeb942
SSDEEP 98304:b58EV6XTHtrXssCkFOrLV9nGOmOOWRTfyo/Tz/PC5xhgIZs1FLdRp:bF6XTHR0kF6y00Y3
TLSH
T19E46AF307916C071E9C211B1897DBFEF86EC99600B6555D7A3C82E2EDD702C33B7299A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_eadfb473f90c987c5c38b9b91912946e_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-08-10_eadfb473f90c987c5c38b9b91912946e_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 5.2MB

2026-08-10_eadfb473f90c987c5c38b9b91912946e_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 9e4e9b309eeb69d894f5a195b36a7bd3
SHA256 69b3974ce1c0eac6c6e8a1e3dc6aadfe72f41e05327ebc5ed36de2610f101345
MD5 eadfb473f90c987c5c38b9b91912946e
SHA1 9da35693c04f4b04f39025ce84ba2830e36dc628
SHA512 5de38c768ee5ef94744cb5d26bcbd5446754151db9ada278c4475cae007f64d0ff7f540371275c1a3fb2b3518af900733ec6aed254bf74b12d4d1d7926aeb942
SSDEEP 98304:b58EV6XTHtrXssCkFOrLV9nGOmOOWRTfyo/Tz/PC5xhgIZs1FLdRp:bF6XTHR0kF6y00Y3
TLSH
T19E46AF307916C071E9C211B1897DBFEF86EC99600B6555D7A3C82E2EDD702C33B7299A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2656130

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Emoji\Desktop\MARTYSAMA GÜNCEL KADİRİN 03.05.2026\m2_client\m2_client\Srcs\Client\bin\Release\Locale2.pdb

kernel32

CreateThreadpoolWait SetThreadpoolWait CloseThreadpoolWait MoveFileA GetPrivateProfileStringA lstrlenA GlobalFree CreateMutexA ReleaseMutex DeleteFileA GetCurrentDirectoryA GetModuleHandleW GetModuleFileNameW GetLocalTime GetFileAttributesW GetTickCount GetCurrentDirectoryW ReadProcessMemory GetCurrentProcessId GetCurrentProcess GetLastError GlobalMemoryStatusEx WriteConsoleW SetEndOfFile HeapQueryInformation HeapSize OutputDebugStringW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimes FindNextFileA FindFirstFileA FindClose MultiByteToWideChar GetNativeSystemInfo SetFileAttributesA GetModuleFileNameA Module32Next Module32First GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage HeapReAlloc DeleteFileW SetStdHandle GetTimeZoneInformation CreateProcessW GetExitCodeProcess GetFileSizeEx SetConsoleCtrlHandler SetFilePointerEx ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale WaitForSingleObjectEx LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect IsThreadAFiber FlsFree FlsSetValue FlsGetValue FlsAlloc GetStdHandle ExitProcess Process32Next SystemTimeToTzSpecificLocalTime GetFileType GetDriveTypeW GetModuleHandleExW FreeLibraryAndExitThread ResumeThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount InterlockedFlushSList InterlockedPushEntrySList RtlUnwind RaiseException GetThreadTimes GetCurrentThread QueryPerformanceFrequency SetLastError WaitNamedPipeW PeekNamedPipe GetSystemTimeAsFileTime GetStartupInfoW IsDebuggerPresent InitializeSListHead TerminateProcess UnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive FindResourceW FindResourceA SizeofResource LoadResource LockResource IsProcessorFeaturePresent InterlockedDecrement HeapValidate InterlockedIncrement GetCPInfo CompareStringEx LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx SwitchToThread TryAcquireSRWLockExclusive GetExitCodeThread WakeConditionVariable InitOnceExecuteOnce CreateEventExW CreateSemaphoreExW FlushProcessWriteBuffers GetCurrentProcessorNumber GetTickCount64 FreeLibraryWhenCallbackReturns CreateThreadpoolTimer SetThreadpoolTimer WaitForThreadpoolTimerCallbacks GetLocaleInfoW CloseThreadpoolTimer CreateSymbolicLinkW GetFileInformationByHandleEx CreateHardLinkW MoveFileExW CopyFileW CreateDirectoryExW AreFileApisANSI GetTempPathW SetFileTime SetFileInformationByHandle SetFileAttributesW GetFullPathNameW GetFinalPathNameByHandleW Process32First CreateToolhelp32Snapshot GetSystemInfo OpenProcess SetThreadPriority Sleep CreateEventA WaitForSingleObject SetEvent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection GetProcessHeap HeapFree GetFileInformationByHandle GetFileAttributesExW GetDiskFreeSpaceExW FindNextFileW FindFirstFileExW FindFirstFileW CreateFileW CreateDirectoryW SetCurrentDirectoryW GetLocaleInfoEx LocalFree GetStringTypeW FormatMessageA QueryPerformanceCounter CopyFileA CreateSemaphoreA ReleaseSemaphore GetLocaleInfoA CompareStringA WideCharToMultiByte lstrlenW GlobalLock GlobalUnlock FreeLibrary GetVersionExA GetSystemDirectoryA GetModuleHandleA WriteFile SetFilePointer ReadFile LoadLibraryA GetProcAddress GetCurrentThreadId SetUnhandledExceptionFilter GetFileSize CreateFileMappingA UnmapViewOfFile MapViewOfFile OutputDebugStringA GetTempFileNameA GetTempPathA RemoveDirectoryA CreateDirectoryA AllocConsole GlobalAlloc HeapAlloc DeviceIoControl CloseHandle FileTimeToSystemTime CreateFileA

user32

CloseClipboard GetClipboardData CharNextW SetTimer DestroyWindow IsWindow CreateWindowExW RegisterClassExW UnregisterClassW DefWindowProcA PostMessageA OffsetRect SetRect FillRect GetClientRect CreateWindowExA InvalidateRect EndPaint BeginPaint ReleaseDC GetDC PeekMessageA ChangeDisplaySettingsA ReleaseCapture SetCapture GetCapture ShowWindow ClientToScreen SetCursorPos LoadImageA DestroyCursor SetCursor ShowCursor GetKeyState SystemParametersInfoA LoadIconA FindWindowA ScreenToClient GetCursorPos GetSystemMetrics GetAsyncKeyState OpenClipboard SetWindowPos FlashWindowEx SendMessageA PostQuitMessage RegisterClassExA UnregisterClassA GetKeyboardLayout GetKeyboardLayoutNameA DispatchMessageA TranslateMessage GetMessageA LoadCursorA ClipCursor AdjustWindowRectEx GetWindowRect SetWindowTextA GetMenu RegisterClassA CharPrevExA CharNextExA SetFocus KillTimer MessageBoxA LoadStringA SetWindowLongA GetWindowLongA SetForegroundWindow UpdateWindow MoveWindow

gdi32

GetCharABCWidthsFloatW EnumFontFamiliesExA SelectObject SetBkColor SetTextColor TextOutW CreateCompatibleDC DeleteDC SetBkMode SetDIBitsToDevice CreateDIBSection TextOutA CreateSolidBrush DeleteObject PatBlt GetStockObject GetTextExtentPoint32A CreateFontIndirectA GetTextExtentPoint32W StretchBlt

advapi32

CryptGenRandom CryptReleaseContext RegQueryValueExW RegOpenKeyExW CryptAcquireContextA RegSetValueExW RegCreateKeyExW RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegCloseKey

shell32

SHGetSpecialFolderPathA SetCurrentProcessExplicitAppUserModelID

ole32

OleInitialize CoGetClassObject CoInitializeEx CoCreateInstance CoInitialize CoUninitialize OleUninitialize OleSetContainedObject

winmm

timeBeginPeriod timeGetDevCaps timeGetTime timeEndPeriod

d3d8

Direct3DCreate8

python27

PyErr_NoMemory Py_OptimizeFlag PyCode_New PyMarshal_ReadObjectFromString _PyLong_New _Py_EllipsisObject PyExc_StopIteration PyExc_EOFError PyExc_ValueError PyEval_EvalCode PyDict_SetItem PyCode_Addr2Line PyObject_AsCharBuffer PyImport_AddModule PyImport_GetMagicNumber PyDict_New PyEval_SetTrace PyRun_StringFlags PyList_SetItem PyString_FromStringAndSize PyComplex_FromCComplex PyFloat_FromDouble PyErr_Occurred Py_Finalize Py_Initialize Py_SetProgramName PyErr_Fetch PyModule_GetDict PyDict_SetItemString PyNumber_Check Py_BuildValue PyModule_AddIntConstant Py_InitModule4 PyLong_AsLong PyTuple_Size PyTuple_GetItem PyDict_GetItemString _PyLong_FromByteArray PyUnicodeUCS2_DecodeUTF8 Py_FlushLine PyCode_Type PyInt_AsLong PyDict_Next PyDict_Size PyLong_FromLongLong PyErr_SetString PyExc_RuntimeError PyString_FromString PyList_New PyList_Append _Py_NoneStruct PyArg_ParseTuple PyInt_FromLong PyTuple_New PyTuple_SetItem PyModule_AddStringConstant PyImport_ImportModule PyString_InternFromString PyObject_GetAttrString PyObject_GetAttr PyCallable_Check PyLong_AsLongLong PyFloat_AsDouble PyString_AsString PyErr_Clear PyErr_BadArgument PyErr_Print PyEval_GetRestricted PyObject_CallObject

iphlpapi

GetAdaptersInfo GetPerAdapterInfo

imm32

ImmGetOpenStatus ImmSetConversionStatus ImmGetConversionStatus ImmGetCandidateListW ImmSetCompositionStringW ImmGetCompositionStringW ImmAssociateContext ImmReleaseContext ImmGetContext ImmIsIME ImmGetIMEFileNameA ImmNotifyIME

shlwapi

PathFindFileNameA PathRemoveFileSpecW PathAppendW

mfplat

MFShutdown MFStartup

mfplay

MFPCreateMediaPlayer

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

devil

ilGenImages ilDeleteImages ilBindImage ilInit ilLoad ilConvertImage ilCopyPixels ilEnable ilTexImage ilOriginFunc ilSetPixels ilSave ilShutDown ilGetInteger

granny2

_GrannyGetFileInfo@4 _GrannyFreeFile@4 _GrannyFreeFileSection@8 _GrannyReadEntireFileFromMemory@8 _GrannyConvertSingleObject@20 _GrannyFindMatchingMember@16 _GrannyGetMaterialTextureByType@8 _GrannySetLogCallback@4 _GrannyGetSourceSkeleton@4 _GrannyCopyMeshVertices@12 _GrannySetModelClock@8 _GrannyFreeCompletedModelControls@4 _GrannySampleModelAnimationsAccelerated@20 _GrannyUpdateModelMatrix@20 _GrannyNewLocalPose@4 _GrannyFreeLocalPose@4 _GrannyGetWorldPoseComposite4x4Array@4 _GrannyInstantiateModel@4 _GrannyFreeModelInstance@4 _GrannyNewMeshBinding@12 _GrannyFreeMeshBinding@4 _GrannyGetMeshBindingToBoneIndices@4 _GrannyFindBoneByName@12 _GrannyNewWorldPose@4 _GrannyFreeWorldPose@4 _GrannyGetWorldPose4x4@8 _GrannyGetWorldPoseComposite4x4@8 _GrannyGetTotalTypeSize@4 _GrannyGetMeshVertexCount@4 _GrannyMeshIsRigid@4 _GrannyGetMeshIndexCount@4 _GrannyFreeControl@4 _GrannyFreeControlOnceUnused@4 _GrannyCompleteControlAt@8 _GrannyControlIsComplete@4 _GrannyFreeControlIfComplete@4 _GrannyGetControlLoopCount@4 _GrannySetControlLoopCount@8 _GrannyGetControlSpeed@4 _GrannySetControlSpeed@8 _GrannyGetControlLocalDuration@4 _GrannySetControlEaseIn@8 _GrannySetControlEaseInCurve@28 _GrannySetControlEaseOut@8 _GrannySetControlEaseOutCurve@28 _GrannyGetControlRawLocalClock@4 _GrannySetControlRawLocalClock@8 _GrannyPlayControlledAnimation@12 _GrannyGetMeshTriangleGroups@4 _GrannyGetMeshVertexType@4 GrannyPNT332VertexType _GrannyDeformVertices@24 _GrannyFreeMeshDeformer@4 _GrannyNewMeshDeformer@16 _GrannyCopyMeshIndices@12 _GrannyGetMeshVertices@4 _GrannyGetMeshTriangleGroupCount@4

mss32

_AIL_file_read@8 _AIL_set_file_callbacks@16 _AIL_WAV_info@8 _AIL_decompress_ASI@24 _AIL_decompress_ADPCM@12 _AIL_file_type@8 _AIL_open_digital_driver@16 _AIL_open_stream@12 _AIL_close_digital_driver@4 _AIL_enumerate_3D_providers@12 _AIL_open_3D_provider@4 _AIL_close_3D_provider@4 _AIL_open_3D_listener@4 _AIL_close_3D_listener@4 _AIL_set_3D_position@16 _AIL_set_3D_velocity@20 _AIL_set_3D_orientation@28 _AIL_startup@0 _AIL_shutdown@0 _AIL_set_redist_directory@4 _AIL_close_stream@4 _AIL_start_stream@4 _AIL_pause_stream@8 _AIL_set_stream_volume_levels@12 _AIL_stream_volume_levels@12 _AIL_set_stream_loop_count@8 _AIL_stream_status@4 _AIL_last_error@0 _AIL_allocate_sample_handle@4 _AIL_release_sample_handle@4 _AIL_init_sample@4 _AIL_start_sample@4 _AIL_stop_sample@4 _AIL_resume_sample@4 _AIL_end_sample@4 _AIL_set_sample_volume_pan@12 _AIL_set_sample_loop_count@8 _AIL_sample_status@4 _AIL_sample_volume_pan@12 _AIL_allocate_3D_sample_handle@4 _AIL_release_3D_sample_handle@4 _AIL_start_3D_sample@4 _AIL_stop_3D_sample@4 _AIL_resume_3D_sample@4 _AIL_end_3D_sample@4 _AIL_set_3D_sample_file@8 _AIL_set_3D_sample_volume@8 _AIL_set_3D_sample_loop_count@8 _AIL_3D_sample_status@4 _AIL_3D_sample_volume@4 _AIL_update_3D_position@8 _AIL_auto_update_3D_position@8 _AIL_set_sample_file@12 _AIL_mem_free_lock@4

speedtreert

?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ ?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z ?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z ?SetLodLevel@CSpeedTreeRT@@QAEXM@Z ?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ ?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z ?GetCurrentError@CSpeedTreeRT@@SAPBDXZ ?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z ?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ ?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z ?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ ?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z ?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ ?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z ?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z ?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z ?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z ?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ ?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z ?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ ?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z ?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z ?DeleteTransientData@CSpeedTreeRT@@QAEXXZ ?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ ?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z ??3CSpeedTreeRT@@SAXPAX@Z ??2CSpeedTreeRT@@SAPAXI@Z ??1CSpeedTreeRT@@QAE@XZ ??0CSpeedTreeRT@@QAE@XZ ??1STextures@CSpeedTreeRT@@QAE@XZ ??0STextures@CSpeedTreeRT@@QAE@XZ ?SetTime@CSpeedTreeRT@@SAXM@Z ?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z ?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z ?SetLightState@CSpeedTreeRT@@SAXI_N@Z ?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z ?SetCamera@CSpeedTreeRT@@SAXPBM0@Z ??0SGeometry@CSpeedTreeRT@@QAE@XZ ??1SGeometry@CSpeedTreeRT@@QAE@XZ

dinput8

DirectInput8Create

ws2_32

htons htonl WSACleanup WSAStartup WSAGetLastError socket ntohl select recv ioctlsocket connect closesocket __WSAFDIsSet inet_addr ntohs gethostbyname gethostname send

ddraw

DirectDrawCreate

oleaut32

SafeArrayDestroy VariantInit SafeArrayAccessData SysAllocString SafeArrayCreate SysFreeString VariantClear

Name

.text

Size

4.0MB

Virtual Size

4.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

707KB

Virtual Size

707KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

218KB

Virtual Size

686KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

49KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

194KB

Virtual Size

194KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=43, id=264, version=35228,

count=49, id=259, version=33145,

count=219, id=261, version=33145,

count=4, id=170, productName=VS2010 build 30319, version=30319,

count=67, id=261, version=34123,

count=2, id=262, version=33145,

count=58, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=1, id=48, version=9044,

count=2, id=203, productName=VS2012 UPD3 build 60610, version=60610,

count=2, id=257, productName=VS2015 [14.0] build 23026, version=23026,

count=5, id=261, productName=VS2019 v16.11.1 build 30133, version=30133,

count=1, id=253, version=35207,

count=29, id=259, version=35207,

count=20, id=260, version=35207,

count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=28, version=9178,

count=76, id=29, version=9178,

count=1, id=18, version=8444,

count=8, productName=Unmarked objects (old),

count=4, id=25, version=9210,

count=1, id=260, version=35228,

count=43, id=260, version=33145,

count=33, id=257, version=33145,

count=575, id=1, productName=Unmarked objects,

count=100, id=261, version=35207,

count=309, id=261, version=35228,

count=1, id=255, version=35228,

count=1, id=151,

count=1, id=258, version=35228,