2026-08-23_9479a9394a1425c5591ff00685c52a15_amadey_cobalt-strike_coinminer_darkgate_elex_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-23_9479a9394a1425c5591ff00685c52a15_amadey_cobalt-strike_coinminer_darkgate_elex_luca-stealer_lynx_njrat
Size 532KB
Sample260824-fl54zsysfx
SHA256 4bf3670ef7054b75d2077e14d5a674327f8682650ac3d89ae9dffd811eff97c6
MD5 9479a9394a1425c5591ff00685c52a15
SHA1 53de282d134cd87693eb0ff0f329341ffa2b058f
SHA512 d16866def6a35252db0f6a8c33fa6739124a0b8ca6ccb2d01afc96901e8baeb0983f742d65211b527f0b5adec390779ed9129e0fb87f1cb971b9c7e9d2e3d926
SSDEEP 12288:aLlmEEAcz1/IIIgEw2ZLZAuo/afPHyGVq++45Flx+eWC:aLlmtB/I9Auo/cvCmFlB
TLSH
T1B5C49D10B8918033C6733871477AFA765D7DA8301B3196CF63C80A796F649D1AA39E6F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-23_9479a9394a1425c5591ff00685c52a15_amadey_cobalt-strike_coinminer_darkgate_elex_luca-stealer_lynx_njrat

File Explorer

2026-08-23_9479a9394a1425c5591ff00685c52a15_amadey_cobalt-strike_coinminer_darkgate_elex_luca-stealer_lynx_njrat

.exe 532KB

2026-08-23_9479a9394a1425c5591ff00685c52a15_amadey_cobalt-strike_coinminer_darkgate_elex_luca-stealer_lynx_njrat

IMPHASH 2b7f19b45958484cf7f3cf5ed96c7c95
SHA256 4bf3670ef7054b75d2077e14d5a674327f8682650ac3d89ae9dffd811eff97c6
MD5 9479a9394a1425c5591ff00685c52a15
SHA1 53de282d134cd87693eb0ff0f329341ffa2b058f
SHA512 d16866def6a35252db0f6a8c33fa6739124a0b8ca6ccb2d01afc96901e8baeb0983f742d65211b527f0b5adec390779ed9129e0fb87f1cb971b9c7e9d2e3d926
SSDEEP 12288:aLlmEEAcz1/IIIgEw2ZLZAuo/afPHyGVq++45Flx+eWC:aLlmtB/I9Auo/cvCmFlB
TLSH
T1B5C49D10B8918033C6733871477AFA765D7DA8301B3196CF63C80A796F649D1AA39E6F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

65376

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

dccw.pdb

advapi32

RegCloseKey RegQueryInfoKeyW RegEnumKeyExW RegOpenKeyExW RegSetValueExW RegCreateKeyExW RegDeleteValueW EventRegister EventUnregister EventWrite RegQueryValueExW

kernel32

CopyFileW GetSystemTime WideCharToMultiByte lstrlenW GetSystemDirectoryW FormatMessageW LocalFree GlobalAlloc GlobalLock GlobalUnlock GlobalFree FindResourceW LockResource GetTickCount CreateFileW CloseHandle ReleaseMutex WaitForSingleObject CreateMutexW HeapSetInformation InitializeCriticalSection GetModuleFileNameW FindResourceExW LoadResource SizeofResource MultiByteToWideChar lstrcmpiW GetModuleHandleW LoadLibraryExW GetProcAddress FreeLibrary GetLastError WriteFile EnterCriticalSection LeaveCriticalSection RaiseException DeleteCriticalSection GetCurrentThreadId GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter TerminateProcess SetUnhandledExceptionFilter HeapFree VirtualFree GetCurrentProcess VirtualAlloc LoadLibraryExA EncodePointer HeapAlloc DecodePointer IsProcessorFeaturePresent GetProcessHeap FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList Sleep GetStartupInfoW UnhandledExceptionFilter OutputDebugStringA

gdi32

StretchBlt CreateCompatibleBitmap SetStretchBltMode SelectObject CreateCompatibleDC GetObjectW GetTextExtentPoint32W SetDeviceGammaRamp GetDeviceGammaRamp GetStockObject SetBkMode SetBkColor SetTextColor CreateSolidBrush GetDeviceCaps CreateDCW DeleteDC DeleteObject

user32

GetWindowTextLengthW GetWindowTextW ReleaseDC MessageBoxW ShowWindow GetWindow UnregisterClassA KillTimer SetTimer SetWindowTextW PostMessageW MapDialogRect EnumChildWindows DisplayConfigGetDeviceInfo LoadStringW QueryDisplayConfig GetDisplayConfigBufferSizes EnumDisplayDevicesW ShowCursor LoadCursorW SetCursor GetMonitorInfoW EnumDisplayMonitors MonitorFromWindow GetParent InvalidateRect MoveWindow MapWindowPoints GetWindowRect GetDlgItem DefWindowProcW SendMessageW CallWindowProcW SetWindowPos SetForegroundWindow SetWindowLongW GetWindowLongW MonitorFromRect SendMessageTimeoutW AllowSetForegroundWindow GetWindowThreadProcessId FindWindowW RegisterWindowMessageW GetActiveWindow GetSystemMetrics CharNextW DestroyWindow GetDC OpenIcon

msvcrt

_ftol2 memcpy _controlfp ?terminate@@YAXXZ realloc _errno _onexit __dllonexit _unlock _lock _except_handler4_common _wcmdln _initterm __setusermatherr __p__fmode _cexit _exit exit __set_app_type __wgetmainargs _amsg_exit __p__commode _XcptFilter _callnewh swscanf_s wcsstr _wcsupr _purecall memcpy_s malloc wcsncpy_s free _ftol2_sse _vsnwprintf towlower iswupper _CIpow memset

ntdll

WinSqmAddToStream

dxva2

SetVCPFeature GetNumberOfPhysicalMonitorsFromHMONITOR GetPhysicalMonitorsFromHMONITOR DestroyPhysicalMonitors GetMonitorBrightness SetMonitorBrightness GetMonitorContrast SetMonitorContrast GetVCPFeatureAndVCPFeatureReply

mscms

WcsSetDefaultColorProfile SetColorProfileElement SetColorProfileElementSize DccwReleaseDisplayProfileAssociationList WcsDisassociateColorProfileFromDevice UninstallColorProfileW GetColorDirectoryW DccwGetDisplayProfileAssociationList DccwCreateDisplayProfileAssociationList DccwGetGamutSize WcsOpenColorProfileW WcsGetDefaultColorProfile WcsGetUsePerUserProfiles WcsGetCalibrationManagementState WcsSetCalibrationManagementState DccwSetDisplayProfileAssociationList CloseColorProfile InstallColorProfileW GetColorProfileFromHandle WcsCreateIccProfile

shell32

ShellExecuteW

gdiplus

GdipDisposeImage GdipCloneImage GdipCreateHBITMAPFromBitmap GdipDeleteBrush GdipCreateBitmapFromStream GdiplusStartup GdiplusShutdown GdipCreateFromHDC GdipDeleteGraphics GdipCreateSolidFill GdipCreateLineBrushI GdipAlloc GdipCloneBrush GdipFillRectangleI GdipFree

comctl32

ord345 DestroyPropertySheetPage CreatePropertySheetPageW PropertySheetW

oleaut32

VarUI4FromStr SysFreeString SysAllocString

api-ms-win-core-com-l1-1-0

StringFromCLSID CoTaskMemRealloc CreateStreamOnHGlobal CoTaskMemFree CoCreateInstance CoTaskMemAlloc

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-23_9479a9394a1425c5591ff00685c52a15_amadey_cobalt-strike_coinminer_darkgate_elex_luca-stealer_lynx_njrat

advapi32

kernel32

gdi32

user32

msvcrt

ntdll

dxva2

mscms

shell32

gdiplus

comctl32

oleaut32

api-ms-win-core-com-l1-1-0

generic