2026-08-14_1869aaed319b219051ac341b6c52bdd9_amadey_darkgate_elex_luca-stealer_lynx_medusalocker_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-14_1869aaed319b219051ac341b6c52bdd9_amadey_darkgate_elex_luca-stealer_lynx_medusalocker_njrat
Size 1.3MB
Sample260814-j99c4aydpg
SHA256 2b86c16767457f009dfa6389fc1fdb2bd7ba15b72904ca3338e8f339082340ad
MD5 1869aaed319b219051ac341b6c52bdd9
SHA1 4773a7385465bbdaaf11144bda8c88466db004bb
SHA512 bb80c2d7427988d99243acb0643b01eb489d5e4c34da364c348617786ca6850a5cd172db0a5757e6ee8e0031b0ee47f92179143fde0149516f67b0720ae58762
SSDEEP 6144:fE0vkZVDM4YBJqYiQ+TbfbtwInr7NFHD0AO+AjvkvP7K6fY:fElvTY3qYiQmfOInVFHD02zK6fY
TLSH
T1615579939259625EDD9E1077F6209497B897DD1C4A94623323C4FB3ABF380F2B8B1316
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-14_1869aaed319b219051ac341b6c52bdd9_amadey_darkgate_elex_luca-stealer_lynx_medusalocker_njrat

File Explorer

2026-08-14_1869aaed319b219051ac341b6c52bdd9_amadey_darkgate_elex_luca-stealer_lynx_medusalocker_njrat

.exe 1.3MB

2026-08-14_1869aaed319b219051ac341b6c52bdd9_amadey_darkgate_elex_luca-stealer_lynx_medusalocker_njrat

IMPHASH c7fc179ab77ed9e802c36f61a9b5e2fb
SHA256 2b86c16767457f009dfa6389fc1fdb2bd7ba15b72904ca3338e8f339082340ad
MD5 1869aaed319b219051ac341b6c52bdd9
SHA1 4773a7385465bbdaaf11144bda8c88466db004bb
SHA512 bb80c2d7427988d99243acb0643b01eb489d5e4c34da364c348617786ca6850a5cd172db0a5757e6ee8e0031b0ee47f92179143fde0149516f67b0720ae58762
SSDEEP 6144:fE0vkZVDM4YBJqYiQ+TbfbtwInr7NFHD0AO+AjvkvP7K6fY:fElvTY3qYiQmfOInVFHD02zK6fY
TLSH
T1615579939259625EDD9E1077F6209497B897DD1C4A94623323C4FB3ABF380F2B8B1316
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

58512

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\SZ_YR\prozip\ProZipHelper\Release\ProZipHelper.pdb

kernel32

LoadResource FindResourceW FindResourceExW SizeofResource RaiseException DecodePointer DeleteCriticalSection GetModuleFileNameW GetLastError lstrlenW GetTickCount FreeLibrary GetProcAddress HeapDestroy GetProcessHeap HeapAlloc LockResource HeapFree HeapReAlloc HeapSize InitializeCriticalSectionEx MultiByteToWideChar WriteConsoleW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection QueryPerformanceCounter CloseHandle WaitForSingleObjectEx Sleep GetCurrentProcess SwitchToThread GetCurrentThread GetCurrentThreadId WideCharToMultiByte GetStringTypeW SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW EncodePointer CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo GetCurrentProcessId InitializeCriticalSection SetEvent ResetEvent UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetStartupInfoW InitializeSListHead GetThreadTimes LoadLibraryExW WriteFile ReadFile FlushFileBuffers CreateFileW RtlUnwind GetModuleHandleExW DeleteFileW GetFileType SetFilePointerEx GetConsoleCP GetConsoleMode GetTimeZoneInformation ExitProcess GetStdHandle IsValidLocale GetUserDefaultLCID EnumSystemLocalesW SetStdHandle SetEndOfFile ReadConsoleW FindClose FindFirstFileExW

user32

wsprintfW WaitForInputIdle SendMessageW IsWindow FindWindowW

shell32

SHGetKnownFolderPath ShellExecuteExW

ole32

CoTaskMemFree

shlwapi

PathFileExistsW StrStrIW PathRemoveFileSpecW PathAppendW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-14_1869aaed319b219051ac341b6c52bdd9_amadey_darkgate_elex_luca-stealer_lynx_medusalocker_njrat

kernel32

user32

shell32

ole32

shlwapi

generic