2026-08-19_6fde67085c574d7bd463e39b9fd5666f_amadey_darkgate_elex_luca-stealer_lynx_njrat

General

Target
2026-08-19_6fde67085c574d7bd463e39b9fd5666f_amadey_darkgate_elex_luca-stealer_lynx_njrat
Size 4.2MB
Sample260819-2mgcxaaa53
SHA256 9940b0863a7186005c0c58da10b4525d526317eca9d084201896a11c4d840a4a
MD5 6fde67085c574d7bd463e39b9fd5666f
SHA1 a6d20fd47372a6804fc2cc6263a48330a4d2ef8c
SHA512 fa4fcc3c03cb2f3613c5b682fb0faf24c7a5cb86d844e6dec4c04ae6d51ca348be4edc466b7d1c92db2677c33660a2d92c51c95d75583aeffd1f76cc5850565e
SSDEEP 49152:rcZ4L6At8gMEB1eam1BJQoaUPa212gRd0LioaO2P3rdDB/c5KgGRQDYqILNiXico:TBoaSaEKiM2wKgsWi7wRGpj3
TLSH
T11B162B22F7520DB2C98340B0CD7A6B76CB5AEC780BF107B37772561EA4796C13525B8A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-19_6fde67085c574d7bd463e39b9fd5666f_amadey_darkgate_elex_luca-stealer_lynx_njrat

File Explorer

2026-08-19_6fde67085c574d7bd463e39b9fd5666f_amadey_darkgate_elex_luca-stealer_lynx_njrat

.exe 4.2MB

2026-08-19_6fde67085c574d7bd463e39b9fd5666f_amadey_darkgate_elex_luca-stealer_lynx_njrat

IMPHASH 83126f8947f7a971a71c69b66066f898
SHA256 9940b0863a7186005c0c58da10b4525d526317eca9d084201896a11c4d840a4a
MD5 6fde67085c574d7bd463e39b9fd5666f
SHA1 a6d20fd47372a6804fc2cc6263a48330a4d2ef8c
SHA512 fa4fcc3c03cb2f3613c5b682fb0faf24c7a5cb86d844e6dec4c04ae6d51ca348be4edc466b7d1c92db2677c33660a2d92c51c95d75583aeffd1f76cc5850565e
SSDEEP 49152:rcZ4L6At8gMEB1eam1BJQoaUPa212gRd0LioaO2P3rdDB/c5KgGRQDYqILNiXico:TBoaSaEKiM2wKgsWi7wRGpj3
TLSH
T11B162B22F7520DB2C98340B0CD7A6B76CB5AEC780BF107B37772561EA4796C13525B8A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

303292

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dvs\p4\build\sw\rel\gpu_drv\r580\r582_12\drivers\nvcamera\redist\_out\wddm2_x86_release\HighresBlender32.pdb

kernel32

CreateFileW DeleteFileW FindClose FindFirstFileW FindNextFileW CloseHandle GetSystemInfo CreateFileMappingW MapViewOfFile UnmapViewOfFile DecodePointer GetLastError InitializeCriticalSectionAndSpinCount DeleteCriticalSection WaitForSingleObjectEx SwitchToThread GetCurrentThreadId GetExitCodeThread GetNativeSystemInfo ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive FormatMessageA WideCharToMultiByte MultiByteToWideChar GetStringTypeW WakeAllConditionVariable SleepConditionVariableSRW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx QueryPerformanceCounter LocalFree GetLocaleInfoEx EncodePointer LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress CompareStringEx GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsDebuggerPresent GetStartupInfoW GetCurrentProcessId InitializeSListHead OutputDebugStringW RaiseException RtlUnwind SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapFree HeapAlloc GetFileType GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc GetTimeZoneInformation FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle HeapSize WriteConsoleW SetEndOfFile LocalAlloc lstrlenA ReplaceFileW InitializeCriticalSection DebugBreak ReleaseSemaphore WaitForSingleObject CreateSemaphoreA

windowscodecs

WICConvertBitmapSource

ole32

CoInitializeEx CoCreateInstance CoUninitialize

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-19_6fde67085c574d7bd463e39b9fd5666f_amadey_darkgate_elex_luca-stealer_lynx_njrat

kernel32

windowscodecs

ole32

generic