2026-08-23_c0eff4b2b32a3b4f2ee717db9f8c1460_amadey_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader

General

Target
2026-08-23_c0eff4b2b32a3b4f2ee717db9f8c1460_amadey_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
Size 1.0MB
Sample260825-1356jaba76
SHA256 9bbfc89860d761ea93346d4a70574fb8cfbb228441c59562b3afbc76715512e4
MD5 c0eff4b2b32a3b4f2ee717db9f8c1460
SHA1 1ddcc5e5bda753e2ac6cadbc5cc1896c9c0217c3
SHA512 ec134db2f2d1fee7d7a538c33ae434c4e8295a9a7363f83e0d4f6df5b909a79ce7c5664f61e1c0082726b9482d95926b3f6bba169f86c1cfc88901069764f13f
SSDEEP 24576:cMw8KH/B1FFD28ssB/7t0ib+UQP9kTPaaVmXJ4:c4K51L28B/7t0iw9/P4
TLSH
T14A35BF037B8144F9F05BC07A565A9739A976BC210F20AADF5350EF292F32AD0AB3D355
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-23_c0eff4b2b32a3b4f2ee717db9f8c1460_amadey_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader

2026-08-23_c0eff4b2b32a3b4f2ee717db9f8c1460_amadey_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader

.exe 1.0MB

IMPHASH 8613ef930607533a0d5c58f82e848384
SHA256 9bbfc89860d761ea93346d4a70574fb8cfbb228441c59562b3afbc76715512e4
MD5 c0eff4b2b32a3b4f2ee717db9f8c1460
SHA1 1ddcc5e5bda753e2ac6cadbc5cc1896c9c0217c3
SHA512 ec134db2f2d1fee7d7a538c33ae434c4e8295a9a7363f83e0d4f6df5b909a79ce7c5664f61e1c0082726b9482d95926b3f6bba169f86c1cfc88901069764f13f
SSDEEP 24576:cMw8KH/B1FFD28ssB/7t0ib+UQP9kTPaaVmXJ4:c4K51L28B/7t0iw9/P4
TLSH
T14A35BF037B8144F9F05BC07A565A9739A976BC210F20AADF5350EF292F32AD0AB3D355
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths