2026-08-24_5d0eaccc93c912b54c0384a04c44ea0a_akira_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-24_5d0eaccc93c912b54c0384a04c44ea0a_akira_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader
Size 4.3MB
Sample260825-ppkrwsak5w
SHA256 90a0b2150c659b86cc73a2717529979b671c7ebf65efa4d850582fdbd3a55b3d
MD5 5d0eaccc93c912b54c0384a04c44ea0a
SHA1 3fbb8355e6cac04f2ee8be9501f5ef6c4f3160f0
SHA512 5764c637f93e5b594c74ecf97f959c7ceac10904e1c941d7006a95d300373e7dee7d4957491bd6eafb304a2f794aec964c10e45a2cef67fa23f8a03a7af9ec00
SSDEEP 98304:4FY+H4I4Oufu/C7Wpo5HegsdXWLCB2JAcsUiIVNmq7gKeTO+5:4G+H4I4OufOvpo5HeddmLSLU7cqUKq
TLSH
T1C9265C21B203C172E49101B16A2DEB7A4969AF310B6750CB73D47FAFB5705D23A36B27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-24_5d0eaccc93c912b54c0384a04c44ea0a_akira_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader

File Explorer

2026-08-24_5d0eaccc93c912b54c0384a04c44ea0a_akira_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader

.exe 4.3MB

2026-08-24_5d0eaccc93c912b54c0384a04c44ea0a_akira_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader

IMPHASH 5b762523da81cd76501aa03d664633e7
SHA256 90a0b2150c659b86cc73a2717529979b671c7ebf65efa4d850582fdbd3a55b3d
MD5 5d0eaccc93c912b54c0384a04c44ea0a
SHA1 3fbb8355e6cac04f2ee8be9501f5ef6c4f3160f0
SHA512 5764c637f93e5b594c74ecf97f959c7ceac10904e1c941d7006a95d300373e7dee7d4957491bd6eafb304a2f794aec964c10e45a2cef67fa23f8a03a7af9ec00
SSDEEP 98304:4FY+H4I4Oufu/C7Wpo5HegsdXWLCB2JAcsUiIVNmq7gKeTO+5:4G+H4I4OufOvpo5HeddmLSLU7cqUKq
TLSH
T1C9265C21B203C172E49101B16A2DEB7A4969AF310B6750CB73D47FAFB5705D23A36B27
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2958114

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

Far.pdb

kernel32

GetConsoleAliasExesW GetConsoleAliasesLengthW GetConsoleAliasesW AddConsoleAliasW GetConsoleDisplayMode GetLargestConsoleWindowSize SetConsoleActiveScreenBuffer FillConsoleOutputCharacterW FillConsoleOutputAttribute CreateConsoleScreenBuffer GetCurrentProcessId SetThreadExecutionState GetCalendarInfoW GetTimeZoneInformation GetModuleHandleW GetDiskFreeSpaceW DefineDosDeviceW GetLogicalDrives GetCurrentThreadId LocalAlloc DisconnectNamedPipe CreateNamedPipeW GetCurrentProcess CreateJobObjectW SetInformationJobObject ConnectNamedPipe CancelIo GetOverlappedResult TerminateProcess AssignProcessToJobObject GetExitCodeProcess WaitNamedPipeW OpenProcess DuplicateHandle WideCharToMultiByte MultiByteToWideChar ResumeThread GetUserDefaultLCID GlobalMemoryStatusEx OpenThread GetCommandLineW SuspendThread GetThreadContext RaiseException SetUnhandledExceptionFilter GetCurrentThread HeapAlloc GetProcessHeap HeapFree CreateProcessW ReadDirectoryChangesW SetVolumeMountPointW GetSystemPowerStatus ExitThread SetStdHandle PeekNamedPipe GetProcAddress GetTempFileNameW WaitForSingleObject WaitForMultipleObjects CloseHandle SetErrorMode FormatMessageW GetLocaleInfoW GetPrivateProfileStringW GetComputerNameW GetComputerNameExW FreeLibrary LoadLibraryExW GetSystemTimeAsFileTime GetSystemTime GetLocalTime FileTimeToSystemTime SystemTimeToFileTime SystemTimeToTzSpecificLocalTime FileTimeToLocalFileTime LocalFileTimeToFileTime Sleep GetProcessTimes GetTimeFormatW GlobalFree GlobalUnlock GlobalAlloc GlobalLock GlobalSize InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection CreateMutexW ReleaseMutex CreateEventW SetEvent ResetEvent CreateTimerQueueTimer DeleteTimerQueueTimer IsDebuggerPresent DebugBreak OutputDebugStringW VirtualQuery GetEnvironmentStringsW FreeEnvironmentStringsW SetLastError SetEnvironmentVariableW ExpandEnvironmentStringsW FindClose FindVolumeClose GetDriveTypeW GetCompressedFileSizeW FindFirstVolumeW FindNextVolumeW SetFilePointerEx SetEndOfFile GetFileSizeEx GetFileInformationByHandle DeviceIoControl CreateFileW CreateDirectoryExW CreateDirectoryW RemoveDirectoryW DeleteFileW GetFileAttributesW GetLastError CreateHardLinkW CopyFileExW MoveFileExW MoveFileW ReplaceFileW GetDiskFreeSpaceExW SetVolumeLabelW GetCurrentDirectoryW SetCurrentDirectoryW GetLongPathNameW GetShortPathNameW GetVolumeInformationW GetVolumeNameForVolumeMountPointW QueryDosDeviceW SearchPathW GetTempPathW GetModuleFileNameW LocalFree GetSystemInfo GetProcessHeaps ReadProcessMemory GetVersionExW SetFileApisToOEM SetFileApisToANSI IsProcessorFeaturePresent CompareStringW FoldStringW GetStringTypeW GetNumberFormatW VirtualProtect TlsSetValue TlsAlloc LoadLibraryW LCMapStringW TlsGetValue GetThreadTimes TlsFree lstrcmpW HeapSize GetNumberOfConsoleInputEvents FlushConsoleInputBuffer SetConsoleCursorInfo GetConsoleCursorInfo WriteConsoleW ReadConsoleW SetConsoleTextAttribute WriteConsoleOutputW ReadConsoleOutputW WriteConsoleInputW ReadConsoleInputW PeekConsoleInputW GetConsoleFontSize GetCurrentConsoleFont SetConsoleMode SetConsoleCtrlHandler SetConsoleOutputCP GetConsoleOutputCP SetConsoleCP GetConsoleCP SetConsoleTitleW SetConsoleScreenBufferSize SetConsoleCursorPosition GetConsoleWindow FreeConsole AllocConsole GetStdHandle FlushFileBuffers VerifyVersionInfoW WriteFile ReadFile GetConsoleMode SetConsoleWindowInfo GetConsoleScreenBufferInfo GetPrivateProfileIntW EnumSystemCodePagesW GetCPInfo GetCPInfoExW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW HeapReAlloc EnumSystemLocalesW IsValidLocale GetDateFormatW GetCommandLineA ExitProcess FreeLibraryAndExitThread CreateThread VirtualAlloc GetFileType InitializeCriticalSectionAndSpinCount RtlUnwind GetStartupInfoW UnhandledExceptionFilter SwitchToThread QueryPerformanceFrequency QueryPerformanceCounter GetConsoleAliasExesLengthW SetFileAttributesW GetConsoleAliasW VerSetConditionMask GetEnvironmentVariableW HeapQueryInformation

advapi32

CheckTokenMembership SetEntriesInAclW InitializeSecurityDescriptor InitializeAcl SetNamedSecurityInfoW GetSecurityDescriptorSacl GetSecurityDescriptorDacl GetSecurityDescriptorGroup GetSecurityDescriptorControl GetNamedSecurityInfoW PrivilegeCheck AdjustTokenPrivileges OpenProcessToken GetTokenInformation AllocateAndInitializeSid FreeSid IsValidSid GetSecurityDescriptorOwner ConvertStringSidToSidW LookupAccountNameW ConvertSidToStringSidW LookupAccountSidW EqualSid CopySid GetLengthSid LookupPrivilegeValueW RegCloseKey RegEnumValueW RegEnumKeyExW RegOpenKeyExW RegQueryValueExW DecryptFileW EncryptFileW GetUserNameW IsTextUnicode SetSecurityInfo GetSecurityInfo SetSecurityDescriptorDacl GetSecurityDescriptorLength

user32

IsCharUpperA IsCharLowerA DispatchMessageW GetMonitorInfoW IsCharLowerW IsZoomed IsIconic DestroyWindow SendMessageW GetAsyncKeyState GetMessageW CreateWindowExW RegisterClassExW UnregisterClassW DefWindowProcW IsCharAlphaW GetDoubleClickTime CharUpperBuffW MonitorFromWindow ScreenToClient GetCursorPos GetKeyboardLayout GetWindowThreadProcessId GetWindow GetClassNameW IsWindowVisible CharLowerBuffW IsCharAlphaNumericW GetSystemMetrics FlashWindowEx IsCharAlphaNumericA GetWindowInfo LoadImageW GetKeyState keybd_event MapVirtualKeyExW SystemParametersInfoW VkKeyScanExW IsCharUpperW CharLowerBuffA CharUpperBuffA OemToCharBuffA CharToOemBuffA ShowWindowAsync MessageBeep IsCharAlphaA PostMessageW GetWindowTextLengthW GetWindowTextW GetKeyboardLayoutList ToUnicodeEx GetProcessWindowStation GetUserObjectInformationW OpenClipboard GetOpenClipboardWindow CloseClipboard EmptyClipboard SetClipboardData RegisterClipboardFormatW IsClipboardFormatAvailable EnumClipboardFormats GetClipboardData GetAncestor GetLastActivePopup GetWindowLongW EnumWindows SetForegroundWindow

shell32

CommandLineToArgvW SHFileOperationW SHGetFolderPathW ShellExecuteExW SHGetDesktopFolder

netapi32

NetApiBufferFree NetUserGetInfo NetServerGetInfo

winspool.drv

StartDocPrinterW OpenPrinterW EnumPrintersW EndDocPrinter ord203 ClosePrinter WritePrinter

mpr

WNetEnumResourceW WNetGetConnectionW WNetCloseEnum WNetCancelConnection2W WNetGetUniversalNameW WNetOpenEnumW WNetAddConnection2W

ole32

CoInitializeEx CoUninitialize CoTaskMemFree GetRunningObjectTable CreateFileMoniker CoCreateInstance

psapi

GetModuleInformation GetModuleFileNameExW GetProcessMemoryInfo EnumProcessModules

secur32

GetUserNameExW

setupapi

CM_Get_Device_ID_List_SizeW CM_Get_Sibling CM_Request_Device_EjectW CM_Get_DevNode_Registry_PropertyW CM_Get_DevNode_Status CM_Get_Device_IDW CM_Locate_DevNodeW CM_Get_Device_ID_ListW CM_Get_Child CM_Get_Device_Interface_ListW CM_Get_Device_Interface_List_SizeW

rpcrt4

UuidHash UuidCreate

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

comdlg32

CommDlgExtendedError ChooseColorW

imm32

ImmGetDefaultIMEWnd

sqlite3

sqlite3_bind_blob64 sqlite3_bind_text64 sqlite3_bind_int64 sqlite3_bind_int sqlite3_step sqlite3_reset sqlite3_clear_bindings sqlite3_finalize sqlite3_backup_init sqlite3_initialize sqlite3_config sqlite3_libversion_number sqlite3_free sqlite3_db_filename sqlite3_errstr sqlite3_system_errno sqlite3_extended_errcode sqlite3_mutex_leave sqlite3_mutex_enter sqlite3_backup_finish sqlite3_open_v2 sqlite3_busy_handler sqlite3_close sqlite3_extended_result_codes sqlite3_column_type sqlite3_column_blob sqlite3_db_handle sqlite3_error_offset sqlite3_backup_step sqlite3_create_collation_v2 sqlite3_db_config sqlite3_last_insert_rowid sqlite3_errmsg sqlite3_prepare_v3 sqlite3_column_int64 sqlite3_column_int sqlite3_column_bytes sqlite3_column_text sqlite3_sql sqlite3_shutdown sqlite3_expanded_sql sqlite3_db_mutex

Name

.text

Size

3.2MB

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

645KB

Virtual Size

645KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

103KB

Virtual Size

480KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

247KB

Virtual Size

247KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

139KB

Virtual Size

138KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-24_5d0eaccc93c912b54c0384a04c44ea0a_akira_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader

kernel32

advapi32

user32

shell32

netapi32

winspool.drv

mpr

ole32

psapi

secur32

setupapi

rpcrt4

version

userenv

comdlg32

imm32

sqlite3

generic