2026-08-12_212b2070af25dbefd71b2cc013cd5ab1_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-12_212b2070af25dbefd71b2cc013cd5ab1_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader
Size 2.8MB
Sample260812-jc4fksyth1
SHA256 52372fb06deb4804a217de7fa98ca7d0b96ace90bc54addf00aeb7c95663435e
MD5 212b2070af25dbefd71b2cc013cd5ab1
SHA1 d912b17909ff432e9acff7647925b6d727e43311
SHA512 0c396216f827b6c1a0ffa5f4351d9a64d5180be4d4e9ba0651891326e5b3a62f22b7d543f3796f5e9ef8368067da5256dae23361e80bd4d970f7a4a12d9c3128
SSDEEP 49152:ukhsnRNPAiyDuCAFpqIV4Mw/9OVs8Z+nJ8mGXKIc+hvv1vhlcy4hfqHJdHvTcXOQ:ukhqAi6zrFOVsJyKDi9vz1PJQOQ
TLSH
T111D52220B571C439D86184718DACDBAA547DAE781F250AEBB3D83ABD1E701D31B31E27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-12_212b2070af25dbefd71b2cc013cd5ab1_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

File Explorer

2026-08-12_212b2070af25dbefd71b2cc013cd5ab1_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

.exe 2.8MB

2026-08-12_212b2070af25dbefd71b2cc013cd5ab1_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

IMPHASH 0934a4aeaba4b53c72fe368162a800c9
SHA256 52372fb06deb4804a217de7fa98ca7d0b96ace90bc54addf00aeb7c95663435e
MD5 212b2070af25dbefd71b2cc013cd5ab1
SHA1 d912b17909ff432e9acff7647925b6d727e43311
SHA512 0c396216f827b6c1a0ffa5f4351d9a64d5180be4d4e9ba0651891326e5b3a62f22b7d543f3796f5e9ef8368067da5256dae23361e80bd4d970f7a4a12d9c3128
SSDEEP 49152:ukhsnRNPAiyDuCAFpqIV4Mw/9OVs8Z+nJ8mGXKIc+hvv1vhlcy4hfqHJdHvTcXOQ:ukhqAi6zrFOVsJyKDi9vz1PJQOQ
TLSH
T111D52220B571C439D86184718DACDBAA547DAE781F250AEBB3D83ABD1E701D31B31E27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

252480

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\WorkSpace\QClawDownloader\QQPCDownload\bin\release\kpacket.pdb

kernel32

FindNextFileW HeapDestroy HeapSize HeapReAlloc HeapFree HeapAlloc GetProcessHeap SizeofResource LockResource LoadResource FindResourceW FindResourceExW GetFileSize GetTickCount DeleteFileW MoveFileExW CopyFileW CreateFileMappingW MapViewOfFile UnmapViewOfFile WriteFile CreateDirectoryW GetLastError GetSystemDirectoryW ReadFile GetStdHandle EnterCriticalSection LeaveCriticalSection WaitForMultipleObjects MultiByteToWideChar WideCharToMultiByte GetWindowsDirectoryW SetFileTime SetFileAttributesW RemoveDirectoryW GetCurrentDirectoryW GetTempPathW GetTempFileNameW SetEndOfFile GetSystemInfo GetProcAddress GetModuleHandleW VirtualFree VirtualAlloc ReleaseSemaphore InitializeCriticalSection WaitForSingleObject CreateEventW SetEvent ResetEvent CreateSemaphoreW GetModuleFileNameW CreateProcessW LoadLibraryW GetCurrentProcessId GetCurrentProcess TerminateProcess lstrcmpW ExpandEnvironmentStringsW GetCommandLineW InitializeCriticalSectionAndSpinCount RaiseException DecodePointer SystemTimeToFileTime LocalFileTimeToFileTime GetConsoleOutputCP FlushFileBuffers SetStdHandle FreeEnvironmentStringsW WriteConsoleW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP CloseHandle CreateFileW FindClose FindFirstFileW GetFileAttributesW SetFilePointer DeleteCriticalSection IsValidCodePage FindFirstFileExW GetFileSizeEx GetConsoleMode SetFilePointerEx EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW GetFileType ExitProcess GetModuleHandleExW FreeLibraryAndExitThread IsDebuggerPresent OutputDebugStringW InitializeCriticalSectionEx EncodePointer GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent WaitForSingleObjectEx GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetFileAttributesExW CreateThread ExitThread

user32

CharUpperW CharLowerW

advapi32

RegOpenKeyExW RegQueryValueExW RegCloseKey

ole32

CoUninitialize CoInitialize

oleaut32

SysAllocString VariantClear VariantCopy SysFreeString

shlwapi

PathFileExistsW PathRemoveFileSpecW PathAddBackslashW PathIsDirectoryW PathAppendW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-12_212b2070af25dbefd71b2cc013cd5ab1_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

kernel32

user32

advapi32

ole32

oleaut32

shlwapi

generic