2026-08-24_232d4fb87157b500a1d0f27e3b3947c6_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_medusalocker_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-24_232d4fb87157b500a1d0f27e3b3947c6_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_medusalocker_njrat
Size 1.2MB
Sample260825-vs2sgawfqa
SHA256 651284b629c2767b1066c522568e678f53a9f46b30a3a60dfdf1d2ad4e87e84d
MD5 232d4fb87157b500a1d0f27e3b3947c6
SHA1 b9ae56a3bc9daf4b199b7c9f053b844dd4ff815e
SHA512 37f0440611be28e5c65eb214be4ad1fc42c0a01535c06115fd54ef574aebee00a57f79bde7f3f6ff112d805ea0068c3c9113257afb5613faebfdf8fd8b2b2535
SSDEEP 24576:843zoeq+vsFvLWHbivgIlI/1DjTtRVAhWy1he:bzdSvd4Ily19y1he
TLSH
T12D457D307646C03AD56141B15AB9DBAE987DB9650F3205CFA3D46F2E1D205C22F32FBA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-24_232d4fb87157b500a1d0f27e3b3947c6_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_medusalocker_njrat

File Explorer

2026-08-24_232d4fb87157b500a1d0f27e3b3947c6_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_medusalocker_njrat

.exe 1.2MB

2026-08-24_232d4fb87157b500a1d0f27e3b3947c6_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_medusalocker_njrat

IMPHASH 242f0e5be02ddffcae902e12e70fe290
SHA256 651284b629c2767b1066c522568e678f53a9f46b30a3a60dfdf1d2ad4e87e84d
MD5 232d4fb87157b500a1d0f27e3b3947c6
SHA1 b9ae56a3bc9daf4b199b7c9f053b844dd4ff815e
SHA512 37f0440611be28e5c65eb214be4ad1fc42c0a01535c06115fd54ef574aebee00a57f79bde7f3f6ff112d805ea0068c3c9113257afb5613faebfdf8fd8b2b2535
SSDEEP 24576:843zoeq+vsFvLWHbivgIlI/1DjTtRVAhWy1he:bzdSvd4Ily19y1he
TLSH
T12D457D307646C03AD56141B15AB9DBAE987DB9650F3205CFA3D46F2E1D205C22F32FBA
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

600049

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\repos\km-printer-driver-win_jijiang\Release\KMPrtDrvCtrl.pdb

setupapi

SetupDiRemoveDevice SetupDiEnumDeviceInfo SetupDiGetDeviceInstanceIdW SetupDiGetDeviceInterfaceDetailW SetupDiGetClassDevsW SetupDiGetDeviceRegistryPropertyW SetupDiEnumDeviceInterfaces SetupDiDestroyDeviceInfoList

kernel32

lstrcmpW ReadFile GetConsoleScreenBufferInfo HeapFree SetLastError SetConsoleTextAttribute GetCurrentProcess lstrlenW GetStdHandle WriteConsoleA WriteFile OutputDebugStringA DeviceIoControl TerminateProcess GetDynamicTimeZoneInformation CreatePipe PeekNamedPipe WaitForSingleObject GetFileAttributesW GetSystemDirectoryW Wow64EnableWow64FsRedirection OpenProcess CreateToolhelp32Snapshot CreateEventW MultiByteToWideChar GetConsoleMode Process32NextW GlobalAlloc Process32FirstW GlobalFree CloseHandle GetNativeSystemInfo HeapAlloc GetProcAddress GetCurrentProcessId GetProcessHeap CreateProcessW GetModuleHandleW GetTickCount GetExitCodeProcess GetCPInfo LCMapStringEx WriteConsoleW SetEndOfFile WideCharToMultiByte ReadConsoleW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA FindNextFileW FindFirstFileExW FindClose GetOEMCP GetACP IsValidCodePage GetFileSizeEx GetConsoleOutputCP FlushFileBuffers SetFilePointerEx SetStdHandle HeapReAlloc GetTimeZoneInformation EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW GetFileType ExitProcess MoveFileExW DeleteFileW LocalFree GetLastError FormatMessageW Sleep GetCurrentThreadId CreateFileW LocalAlloc GetTempPathW GetModuleFileNameW InitializeCriticalSectionAndSpinCount SetEvent ResetEvent UnhandledExceptionFilter SetUnhandledExceptionFilter CreateDirectoryW RtlUnwind IsDebuggerPresent GetStartupInfoW InitializeSListHead HeapSize LoadLibraryExW FreeLibrary GetThreadTimes GetCurrentThread TlsFree TlsSetValue TlsGetValue TlsAlloc GetSystemTimeAsFileTime GetModuleHandleA VerSetConditionMask VerifyVersionInfoW GetStringTypeW InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx TryEnterCriticalSection DeleteCriticalSection QueryPerformanceCounter InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableCS SleepConditionVariableSRW RaiseException IsProcessorFeaturePresent FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW InitOnceComplete InitOnceBeginInitialize FormatMessageA WaitForSingleObjectEx GetExitCodeThread EncodePointer DecodePointer

user32

MessageBoxW LoadStringW

winspool.drv

DeletePrinter DeletePrinterDriverW XcvDataW SetJobW DeleteFormW EnumJobsW AddPrinterW AddFormW InstallPrinterDriverFromPackageW ClosePrinter GetPrinterDataExW EnumPrintersW OpenPrinterW GetPrinterDataW SetPrinterDataW UploadPrinterDriverPackageW EnumPrinterDriversW GetPrinterW EnumPortsW DeletePrinterDriverPackageW

advapi32

ControlService QueryServiceStatusEx OpenServiceW RegDeleteValueW RegGetValueW RegOpenKeyExW StartServiceW RegCloseKey CloseServiceHandle OpenSCManagerW RegQueryValueExW EnumDependentServicesW RegSetValueExW

shell32

CommandLineToArgvW ShellExecuteW

ole32

CoInitializeEx CoInitializeSecurity CoSetProxyBlanket CoCreateInstance CoUninitialize

oleaut32

VariantInit SysFreeString SysAllocString VariantClear

crypt32

CryptUnprotectMemory CertFreeCertificateContext CertGetCertificateChain CertFreeCertificateChain CertVerifyCertificateChainPolicy

bcrypt

BCryptCloseAlgorithmProvider BCryptDestroyHash BCryptFinishHash BCryptHashData BCryptCreateHash BCryptOpenAlgorithmProvider BCryptGetProperty

winhttp

WinHttpSetStatusCallback WinHttpGetDefaultProxyConfiguration WinHttpOpen WinHttpCloseHandle WinHttpConnect WinHttpReadData WinHttpWriteData WinHttpQueryDataAvailable WinHttpQueryOption WinHttpSetOption WinHttpSetTimeouts WinHttpOpenRequest WinHttpSendRequest WinHttpSetCredentials WinHttpQueryAuthSchemes WinHttpReceiveResponse WinHttpQueryHeaders WinHttpGetProxyForUrl WinHttpGetIEProxyConfigForCurrentUser WinHttpAddRequestHeaders

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-24_232d4fb87157b500a1d0f27e3b3947c6_amadey_avoslocker_darkgate_elex_hijackloader_luca-stealer_lynx_medusalocker_njrat

setupapi

kernel32

user32

winspool.drv

advapi32

shell32

ole32

oleaut32

crypt32

bcrypt

winhttp

generic