General

  • Target
    2026-08-20_62c2eb22de77dff1cb86bd488238e075_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat_remcos
  • Size 24.9MB
  • Sample260820-gknzrabf39
  • SHA256 d6a3502dae640b1c536e8de5f46767c8fd10f0b40e4ec0426e6bd63a0c632d6f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defen 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2026-08-20_62c2eb22de77dff1cb86bd488238e075_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat_remcos
    .exe 24.9MB

2026-08-20_62c2eb22de77dff1cb86bd488238e075_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat_remcos

  • IMPHASH 765f5f3c8a7b60fdc91ab4ecba847eab
  • SHA256 d6a3502dae640b1c536e8de5f46767c8fd10f0b40e4ec0426e6bd63a0c632d6f
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers

  • Detects executables embedding registry key / value combination indicative of disabling Windows Defen

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
10111312
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\_projects\MyAdvancedPC\Release\UI.pdb