2026-09-12_16a47934315b911c36ea5d69f6fe0920_amadey_darkgate_elex_glassworm_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop

General

Target
2026-09-12_16a47934315b911c36ea5d69f6fe0920_amadey_darkgate_elex_glassworm_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop
Size 3.4MB
Sample260913-gpmbqaff99
SHA256 9b641c978779892fd4dff45c4daf162c8f9fe3976df03bd69cb671129319c861
MD5 16a47934315b911c36ea5d69f6fe0920
SHA1 061d95b7ad8ba2044aad94e1c80cc928b9333ff2
SHA512 bc4b5d8407de85a932479effb540a7d13e2fd5aec3b6c81109b6d77156a4eef5367f0740121a0a27d8f2f00b288a528b18c3898e97bed797709986db39a5448f
SSDEEP 98304:s/vN1SERbmhT227p+ZuoDtFDp4Z/X8SVLFC/KnfzNg1mPvKQ2jptOjt6Wq6wvkfn:vhT227p+VDtj4Z/X8SxFC/KnfzNg1mPL
TLSH
T1C7F58E00FBCB40F2D967093044A7F32F5B35A602C524CF9EFA9C1A59EF33662592576A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-12_16a47934315b911c36ea5d69f6fe0920_amadey_darkgate_elex_glassworm_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop

2026-09-12_16a47934315b911c36ea5d69f6fe0920_amadey_darkgate_elex_glassworm_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop

.exe 3.4MB

SHA256 9b641c978779892fd4dff45c4daf162c8f9fe3976df03bd69cb671129319c861
MD5 16a47934315b911c36ea5d69f6fe0920
SHA1 061d95b7ad8ba2044aad94e1c80cc928b9333ff2
SHA512 bc4b5d8407de85a932479effb540a7d13e2fd5aec3b6c81109b6d77156a4eef5367f0740121a0a27d8f2f00b288a528b18c3898e97bed797709986db39a5448f
SSDEEP 98304:s/vN1SERbmhT227p+ZuoDtFDp4Z/X8SVLFC/KnfzNg1mPvKQ2jptOjt6Wq6wvkfn:vhT227p+VDtj4Z/X8SxFC/KnfzNg1mPL
TLSH
T1C7F58E00FBCB40F2D967093044A7F32F5B35A602C524CF9EFA9C1A59EF33662592576A
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

7512

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths