2026-08-23_82030972be8b98a20d245d5204ef4747_amadey_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-23_82030972be8b98a20d245d5204ef4747_amadey_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_vidar
Size 32.4MB
Sample260824-jaaqgsdn21
SHA256 e6ca5f3328666dd4cbaef607b55675c4b3f8226d6d6d3caf4faa4a763ced2d3f
MD5 82030972be8b98a20d245d5204ef4747
SHA1 3671a53bcf5cd1ac4bde99569fd913616121e1e0
SHA512 10652b32f00166bb0be9f09887c7e8e618f0055d3875753429931224efaa24552cf8517120a9050a1f1e825f5fe66470c0745cfa8d8ba891933bb33b5cd3c9d0
SSDEEP 49152:Um+ES+ESgq+ESm+ES+ESm+ES+ESm+ES+ESgX+ESm+ES+ESm+ES+ESm+ES+ESgq+j:aKjKWQckVgtev5mnlNL
TLSH
T140773B09F98340B1D92B50F04DCBE3BF8A70BB2586128EF7E74DCB5BA933BA15428555
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-23_82030972be8b98a20d245d5204ef4747_amadey_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_vidar

File Explorer

2026-08-23_82030972be8b98a20d245d5204ef4747_amadey_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_vidar

.exe 32.4MB

2026-08-23_82030972be8b98a20d245d5204ef4747_amadey_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_vidar

SHA256 e6ca5f3328666dd4cbaef607b55675c4b3f8226d6d6d3caf4faa4a763ced2d3f
MD5 82030972be8b98a20d245d5204ef4747
SHA1 3671a53bcf5cd1ac4bde99569fd913616121e1e0
SHA512 10652b32f00166bb0be9f09887c7e8e618f0055d3875753429931224efaa24552cf8517120a9050a1f1e825f5fe66470c0745cfa8d8ba891933bb33b5cd3c9d0
SSDEEP 49152:Um+ES+ESgq+ESm+ES+ESm+ES+ESm+ES+ESgX+ESm+ES+ESm+ES+ESm+ES+ESgq+j:aKjKWQckVgtev5mnlNL
TLSH
T140773B09F98340B1D92B50F04DCBE3BF8A70BB2586128EF7E74DCB5BA933BA15428555
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5136

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

52KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

544B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/14

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/29

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/41

Size

512B

Virtual Size

181B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/80

Size

512B

Virtual Size

159B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/91

Size

512B

Virtual Size

492B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-23_82030972be8b98a20d245d5204ef4747_amadey_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_vidar

generic