2026-08-12_1ee0c85e68d993279274ac4efa52fd19_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-12_1ee0c85e68d993279274ac4efa52fd19_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader
Size 2.8MB
Sample260812-jde5da1fnc
SHA256 362ebe87f360d871c1659260f2168abf40868a0f0f36a3fc69d4246fcf7b2e3b
MD5 1ee0c85e68d993279274ac4efa52fd19
SHA1 f5e0caef2609a7e1091b773dfec37faefd6a239a
SHA512 ceca10dc1c2f93885cad7efb5168a827db02643265edc3a5625bdfeea401ecbae86a2ac30a14dd607b688b9b70ede16acea184a17946f69eeb1b77fd77b6f775
SSDEEP 49152:QkhsnRNPAiyDuCAFrApxVsxbzpyjadrWVHZjj5wmeDVXjj09iRVokvW33RyyFbJo:QkhqAi6EyV6jKdtoNjjJRVXW8yNJoxU2
TLSH
T132D51220B532C136D861807149B8DBBA567EBE381B6145EBB3D43EBD1E301D22B35E67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-12_1ee0c85e68d993279274ac4efa52fd19_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

File Explorer

2026-08-12_1ee0c85e68d993279274ac4efa52fd19_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

.exe 2.8MB

2026-08-12_1ee0c85e68d993279274ac4efa52fd19_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

IMPHASH 0934a4aeaba4b53c72fe368162a800c9
SHA256 362ebe87f360d871c1659260f2168abf40868a0f0f36a3fc69d4246fcf7b2e3b
MD5 1ee0c85e68d993279274ac4efa52fd19
SHA1 f5e0caef2609a7e1091b773dfec37faefd6a239a
SHA512 ceca10dc1c2f93885cad7efb5168a827db02643265edc3a5625bdfeea401ecbae86a2ac30a14dd607b688b9b70ede16acea184a17946f69eeb1b77fd77b6f775
SSDEEP 49152:QkhsnRNPAiyDuCAFrApxVsxbzpyjadrWVHZjj5wmeDVXjj09iRVokvW33RyyFbJo:QkhqAi6EyV6jKdtoNjjJRVXW8yNJoxU2
TLSH
T132D51220B532C136D861807149B8DBBA567EBE381B6145EBB3D43EBD1E301D22B35E67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

252480

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\WorkSpace\QClawDownloader\QQPCDownload\bin\release\kpacket.pdb

kernel32

FindNextFileW HeapDestroy HeapSize HeapReAlloc HeapFree HeapAlloc GetProcessHeap SizeofResource LockResource LoadResource FindResourceW FindResourceExW GetFileSize GetTickCount DeleteFileW MoveFileExW CopyFileW CreateFileMappingW MapViewOfFile UnmapViewOfFile WriteFile CreateDirectoryW GetLastError GetSystemDirectoryW ReadFile GetStdHandle EnterCriticalSection LeaveCriticalSection WaitForMultipleObjects MultiByteToWideChar WideCharToMultiByte GetWindowsDirectoryW SetFileTime SetFileAttributesW RemoveDirectoryW GetCurrentDirectoryW GetTempPathW GetTempFileNameW SetEndOfFile GetSystemInfo GetProcAddress GetModuleHandleW VirtualFree VirtualAlloc ReleaseSemaphore InitializeCriticalSection WaitForSingleObject CreateEventW SetEvent ResetEvent CreateSemaphoreW GetModuleFileNameW CreateProcessW LoadLibraryW GetCurrentProcessId GetCurrentProcess TerminateProcess lstrcmpW ExpandEnvironmentStringsW GetCommandLineW InitializeCriticalSectionAndSpinCount RaiseException DecodePointer SystemTimeToFileTime LocalFileTimeToFileTime GetConsoleOutputCP FlushFileBuffers SetStdHandle FreeEnvironmentStringsW WriteConsoleW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP CloseHandle CreateFileW FindClose FindFirstFileW GetFileAttributesW SetFilePointer DeleteCriticalSection IsValidCodePage FindFirstFileExW GetFileSizeEx GetConsoleMode SetFilePointerEx EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW GetFileType ExitProcess GetModuleHandleExW FreeLibraryAndExitThread IsDebuggerPresent OutputDebugStringW InitializeCriticalSectionEx EncodePointer GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent WaitForSingleObjectEx GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetFileAttributesExW CreateThread ExitThread

user32

CharUpperW CharLowerW

advapi32

RegOpenKeyExW RegQueryValueExW RegCloseKey

ole32

CoUninitialize CoInitialize

oleaut32

SysAllocString VariantClear VariantCopy SysFreeString

shlwapi

PathFileExistsW PathRemoveFileSpecW PathAddBackslashW PathIsDirectoryW PathAppendW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-12_1ee0c85e68d993279274ac4efa52fd19_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

kernel32

user32

advapi32

ole32

oleaut32

shlwapi

generic