2026-09-06_232c1dff0a58e90854a2bee82eb63e6c_amadey_darkgate_elex_luca-stealer_lynx_njrat_remcos_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-06_232c1dff0a58e90854a2bee82eb63e6c_amadey_darkgate_elex_luca-stealer_lynx_njrat_remcos_smoke-loader
Size 1.3MB
Sample260907-hd4bjaywax
SHA256 1b2127cb30f3aefb1f59b668a783f185d317741d197827c4fea1c77e7d4500a7
MD5 232c1dff0a58e90854a2bee82eb63e6c
SHA1 4142393db4523520fd2b9c34d7bcd7843f8ea44e
SHA512 52f3707ed42849e2435f1f9d1d1517e992f5f40644796283737e1645ecf075e80ecbac6cf9a076338b9e727dc683d3430ea6fecd6c52905413fcae27cfa85d64
SSDEEP 24576:JV7zzNebHVXeIB+nqmdVS22XRA+ht9tiqknSHOYsbZ3dxpj9Jbac:7ze8FXV3wRA+hTtiqknKobZ3FZ
TLSH
T196556C12B5B1D432D02202F1B969AA559DAEBE349B3045CF3785373DDB302D2DB27A1B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-06_232c1dff0a58e90854a2bee82eb63e6c_amadey_darkgate_elex_luca-stealer_lynx_njrat_remcos_smoke-loader

File Explorer

2026-09-06_232c1dff0a58e90854a2bee82eb63e6c_amadey_darkgate_elex_luca-stealer_lynx_njrat_remcos_smoke-loader

.exe 1.3MB

2026-09-06_232c1dff0a58e90854a2bee82eb63e6c_amadey_darkgate_elex_luca-stealer_lynx_njrat_remcos_smoke-loader

IMPHASH 86acb44c36a25fba6aa6820b5ea98bc5
SHA256 1b2127cb30f3aefb1f59b668a783f185d317741d197827c4fea1c77e7d4500a7
MD5 232c1dff0a58e90854a2bee82eb63e6c
SHA1 4142393db4523520fd2b9c34d7bcd7843f8ea44e
SHA512 52f3707ed42849e2435f1f9d1d1517e992f5f40644796283737e1645ecf075e80ecbac6cf9a076338b9e727dc683d3430ea6fecd6c52905413fcae27cfa85d64
SSDEEP 24576:JV7zzNebHVXeIB+nqmdVS22XRA+ht9tiqknSHOYsbZ3dxpj9Jbac:7ze8FXV3wRA+hTtiqknKobZ3FZ
TLSH
T196556C12B5B1D432D02202F1B969AA559DAEBE349B3045CF3785373DDB302D2DB27A1B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

527365

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\kantu_ai\out\bin\Win32\Release\HPPUninstall.pdb

shlwapi

SHCreateStreamOnFileEx

shell32

SHCreateDirectoryExW SHFileOperationW SHGetPathFromIDListW ShellExecuteExW SHBrowseForFolderW SHGetFolderPathW CommandLineToArgvW ShellExecuteW SHChangeNotify

ole32

CoUninitialize CoInitializeEx CreateStreamOnHGlobal CoTaskMemFree CoCreateInstance

advapi32

OpenServiceW CreateServiceW RegSetKeyValueW RegCloseKey CryptAcquireContextW CloseServiceHandle CryptGenRandom OpenSCManagerW ChangeServiceConfig2W RegDeleteKeyValueW RegCreateKeyExW DeleteService ControlService CryptCreateHash CryptHashData RegDeleteTreeW RegSetValueExW CryptDestroyHash CryptReleaseContext RegQueryValueExW QueryServiceStatusEx CryptGetHashParam RegOpenKeyExW ChangeServiceConfigW StartServiceW

crypt32

CryptBinaryToStringW

urlmon

URLDownloadToFileW

gdiplus

GdiplusShutdown GdipGetImageHeight GdipCloneImage GdipAlloc GdipDrawImageRectI GdipDisposeImage GdiplusStartup GdipCreateFromHDC GdipDeleteGraphics GdipSetCompositingMode GdipGetImageWidth GdipDrawImageRectRectI GdipLoadImageFromStream GdipFree

winhttp

WinHttpOpen WinHttpOpenRequest WinHttpCloseHandle WinHttpSendRequest WinHttpSetTimeouts WinHttpConnect WinHttpCrackUrl WinHttpReceiveResponse

kernel32

GetProcessHeap HeapSize SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage HeapReAlloc GetTimeZoneInformation ReadConsoleW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapAlloc HeapFree GetFileType SizeofResource WritePrivateProfileStringW GetCommandLineW GetCurrentProcess TerminateProcess RemoveDirectoryW GetModuleFileNameW WaitForSingleObject GetFileAttributesW GetSystemDirectoryW OpenProcess SetFileAttributesW CreateToolhelp32Snapshot MultiByteToWideChar GetSystemWow64DirectoryW GetPrivateProfileStringW Sleep GetLastError Process32NextW LockResource GlobalAlloc DeleteFileW Process32FirstW GlobalFree CloseHandle CreateThread LoadResource FindResourceW GetLocalTime GetProcAddress GlobalLock LocalFree MoveFileExW GetCurrentProcessId CreateProcessW GetModuleHandleW CopyFileW WideCharToMultiByte GetTickCount GlobalUnlock IsWow64Process GetExitCodeProcess WriteConsoleW CreateFileW SetFileTime LocalFileTimeToFileTime VirtualAlloc VirtualFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection FindClose FindFirstFileW FindNextFileW GetSystemTimeAsFileTime FileTimeToDosDateTime DosDateTimeToFileTime GetSystemInfo FileTimeToLocalFileTime InitializeCriticalSection SetEvent ResetEvent ReleaseSemaphore CreateEventW CreateSemaphoreW QueryPerformanceCounter GetCurrentThreadId GetVersionExW WaitForMultipleObjects ReadFile SetEndOfFile WriteFile CreateDirectoryW GetTempPathW SetLastError GetModuleHandleA AreFileApisANSI GetFileSizeEx ExitProcess GetStdHandle GetModuleHandleExW FreeLibraryAndExitThread ExitThread LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetFilePointerEx RaiseException RtlUnwind GetStartupInfoW IsDebuggerPresent InitializeSListHead IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo GetFileInformationByHandleEx FormatMessageA GetStringTypeW InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx FormatMessageW SetFileInformationByHandle GetFullPathNameW GetFinalPathNameByHandleW GetFileInformationByHandle GetFileAttributesExW FindFirstFileExW

user32

CharPrevExA CharUpperW GetWindowLongW GetWindowTextLengthW GetMessageW DefWindowProcW PostMessageW GetWindow GetWindowRect GetFocus DestroyWindow GetDC SetWindowPos MessageBoxW SetWindowRgn HideCaret FillRect CreateWindowExW ScreenToClient GetSystemMetrics SetWindowTextW RegisterClassExW SetCaretPos ShowWindow OpenClipboard DispatchMessageW SetTimer RedrawWindow CloseClipboard CreateCaret TrackMouseEvent SetFocus TranslateMessage GetClipboardData LoadCursorW DestroyCaret SetCapture SetCursor GetClientRect GetDlgItem UpdateLayeredWindow DrawTextW ShowCaret SetWindowLongW PostQuitMessage PtInRect UpdateWindow ReleaseCapture InvalidateRect ReleaseDC BeginPaint EndPaint GetWindowTextW KillTimer

gdi32

CreateCompatibleBitmap CreateSolidBrush DeleteObject SetBkMode SetTextColor GetTextExtentPoint32W DeleteDC CreateRectRgn GetStockObject CreateFontW PatBlt CreateCompatibleDC CreateDIBSection SelectObject BitBlt

oleaut32

SysAllocStringLen VariantCopy VariantClear SysFreeString SysAllocString

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-06_232c1dff0a58e90854a2bee82eb63e6c_amadey_darkgate_elex_luca-stealer_lynx_njrat_remcos_smoke-loader

shlwapi

shell32

ole32

advapi32

crypt32

urlmon

gdiplus

winhttp

kernel32

user32

gdi32

oleaut32

generic