2026-09-16_edc80393a7d9f95eef2840f680373112_amadey_elex_floxif_icedid_luca-stealer_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-16_edc80393a7d9f95eef2840f680373112_amadey_elex_floxif_icedid_luca-stealer_njrat
Size 4.6MB
Sample260916-s5beya1sat
SHA256 83b6a7878fd78e3c877bc49e6473db007c38bea66f145d30dc48c03ff08ddb7a
MD5 edc80393a7d9f95eef2840f680373112
SHA1 93e89cd516495c95dd7d38f3e3e6b2bb1c0913f8
SHA512 58e4fd0c982a4a5ec9f24af9e1956da23e4fddf74908e09b049ad66690cdf0e167e3513945c59973e2ef2a9283becb4a9649dd11f0f3033d8a6eec9177ca65c4
SSDEEP 98304:TdeqEvJQMW7DXP/yoCBOJyoKMXaeu3xazyMB2OpZbS+:B9nn3yoEiLu3xazcOpZbS+
TLSH
T1D7266D60BF6E4425C9363231CB5EBAE4B4AF7F6037E241E782543758DBB4392CE2055A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-16_edc80393a7d9f95eef2840f680373112_amadey_elex_floxif_icedid_luca-stealer_njrat

File Explorer

2026-09-16_edc80393a7d9f95eef2840f680373112_amadey_elex_floxif_icedid_luca-stealer_njrat

.exe 4.6MB

2026-09-16_edc80393a7d9f95eef2840f680373112_amadey_elex_floxif_icedid_luca-stealer_njrat

IMPHASH cd0940c7f18640a367a0c016353205ed
SHA256 83b6a7878fd78e3c877bc49e6473db007c38bea66f145d30dc48c03ff08ddb7a
MD5 edc80393a7d9f95eef2840f680373112
SHA1 93e89cd516495c95dd7d38f3e3e6b2bb1c0913f8
SHA512 58e4fd0c982a4a5ec9f24af9e1956da23e4fddf74908e09b049ad66690cdf0e167e3513945c59973e2ef2a9283becb4a9649dd11f0f3033d8a6eec9177ca65c4
SSDEEP 98304:TdeqEvJQMW7DXP/yoCBOJyoKMXaeu3xazyMB2OpZbS+:B9nn3yoEiLu3xazcOpZbS+
TLSH
T1D7266D60BF6E4425C9363231CB5EBAE4B4AF7F6037E241E782543758DBB4392CE2055A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2428336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Download\Download_Trunk\Win\ResearchDownload\Source\DLoader\UpgradeDownload_Release\UpgradeDownload.pdb

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

processflow

WriteDataToFlow DisconnectDB ConnectDB ExitProcessFlow CheckProcessEnable InitProcessFlow

porthound

ReleaseDevHound CreateDevHound

sprdmesapp

MES_GetBatchInfo MES_WriteTestResult MES_Release MES_Disconnect MES_EnableCheck MES_GetBatchName MES_GetLastError MES_Create

secbinpack9

CreateSecPacParse

liveupdatesdll

CheckToolVerUpdate

wininet

InternetGetConnectedState

dlframe

CreateDLObj

kernel32

SetErrorMode GetWindowsDirectoryW VerSetConditionMask VerifyVersionInfoW GetProfileIntW SearchPathW LocalLock LocalUnlock UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent WaitForSingleObjectEx QueryPerformanceCounter GetSystemTimeAsFileTime GetLocaleInfoW IsDebuggerPresent GetStartupInfoW GlobalFlags GetAtomNameW LocalReAlloc LocalAlloc LocalFileTimeToFileTime GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount GlobalGetAtomNameW GetThreadLocale GetStringTypeExW MoveFileW lstrcmpiW GetCurrentProcess DuplicateHandle UnlockFile SetEndOfFile LockFile GetVolumeInformationW GetShortPathNameW GetOEMCP GetUserDefaultLCID SystemTimeToFileTime ReplaceFileW GetFileAttributesExW FindResourceExW GetUserDefaultUILanguage GlobalHandle OutputDebugStringW SwitchToThread LCMapStringW GetStringTypeW GetCPInfo RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetCommandLineA GetCommandLineW ExitProcess GetModuleHandleExW FindFirstFileExW CreateThread ExitThread FreeLibraryAndExitThread HeapQueryInformation GetSystemInfo VirtualAlloc VirtualQuery QueryPerformanceFrequency SetStdHandle GetFileType GetStdHandle GetDateFormatW GetTimeFormatW IsValidLocale EnumSystemLocalesW GetTimeZoneInformation GetConsoleCP GetConsoleMode SetFileTime GetTempFileNameW GetFullPathNameW GetDiskFreeSpaceW CompareStringA GetCurrentThread ResumeThread SuspendThread SetThreadPriority lstrcmpA GetVersionExW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime FileTimeToLocalFileTime VirtualProtect GetCurrentProcessId CompareStringW GlobalFindAtomW GlobalAddAtomW lstrcmpW GlobalDeleteAtom LoadLibraryA LoadLibraryExW GetModuleHandleW GetModuleHandleA FreeResource GetCurrentThreadId EncodePointer OutputDebugStringA SetFilePointerEx ReadConsoleW GetDriveTypeW IsValidCodePage GetACP CopyFileW FormatMessageW MulDiv GetSystemDefaultUILanguage LocalFree GlobalFree GlobalUnlock GlobalLock GlobalSize GlobalAlloc SetLastError GetComputerNameExW lstrcpynW lstrlenW lstrcatW lstrcpyW InitializeCriticalSectionEx GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy RaiseException DecodePointer RemoveDirectoryW Process32NextW Process32FirstW CreateToolhelp32Snapshot OpenProcess TerminateProcess QueryDosDeviceW CreateNamedPipeW ConnectNamedPipe FlushFileBuffers IsBadWritePtr IsBadReadPtr GetPrivateProfileStringA GetPrivateProfileIntA lstrlenA GetModuleFileNameA GetFileTime UnmapViewOfFile GetSystemDirectoryW GetLocalTime Sleep CreateEventW WaitForSingleObject ResetEvent SetEvent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CloseHandle GetTempPathW WriteFile SetFilePointer ReadFile GetFileSizeEx GetFileSize FindNextFileW DeleteFileW CreateFileW CreateDirectoryW GetCurrentDirectoryW WritePrivateProfileSectionW GetPrivateProfileSectionW FindFirstFileW FindClose LoadLibraryW GetProcAddress GetModuleFileNameW FreeLibrary GetLastError WritePrivateProfileStringW SetFileAttributesW GetFileAttributesW GetTickCount WideCharToMultiByte MultiByteToWideChar GetPrivateProfileStringW GetPrivateProfileIntW FindResourceW SizeofResource LockResource LoadResource GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetConsoleCtrlHandler SetCurrentDirectoryW InitializeSListHead WriteConsoleW

user32

EnumDisplayMonitors SetLayeredWindowAttributes GetMenuDefaultItem NotifyWinEvent InvertRect HideCaret EnableScrollBar GetIconInfo DrawIconEx UnionRect GetNextDlgGroupItem InvalidateRgn CopyAcceleratorTableW CharNextW SetParent DeleteMenu CopyImage TrackMouseEvent RealChildWindowFromPoint LoadCursorW GetSysColorBrush GetDialogBaseUnits ReuseDDElParam UnpackDDElParam GetMenuBarInfo DestroyIcon InsertMenuItemW CreatePopupMenu TranslateAcceleratorW LoadAcceleratorsW BringWindowToTop GetMenuItemInfoW DestroyMenu CharUpperW SetWindowContextHelpId SetCursor ShowOwnedPopups PostQuitMessage GetMessageW IntersectRect MapVirtualKeyW GetKeyNameTextW MapDialogRect GetAsyncKeyState WindowFromPoint GetCursorPos ClientToScreen GetWindowDC TabbedTextOutW GrayStringW DrawTextExW GetWindowThreadProcessId LoadMenuW GetActiveWindow GetNextDlgTabItem EndDialog CreateDialogIndirectParamW IsDialogMessageW SetWindowTextW ScrollWindowEx IsWindowEnabled SendDlgItemMessageW IsDlgButtonChecked CheckRadioButton CheckDlgButton GetDlgItemTextW SetDlgItemTextW GetDlgItemInt SetDlgItemInt MoveWindow ShowWindow GetMonitorInfoW MonitorFromWindow WinHelpW GetScrollInfo SetScrollInfo CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW GetLastActivePopup GetTopWindow GetClassLongW SetWindowLongW EqualRect MessageBoxW AdjustWindowRectEx RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange ScrollWindow RedrawWindow ValidateRect EndPaint BeginPaint SetForegroundWindow CloseClipboard SetActiveWindow TrackPopupMenuEx TrackPopupMenu SetMenu GetMenu GetDlgCtrlID GetDlgItem IsIconic IsWindowVisible EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement SetWindowPos DestroyWindow IsChild IsMenu CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW DefWindowProcW GetMessageTime RegisterWindowMessageW SetClipboardData EmptyClipboard DrawStateW SetClassLongW SetWindowRgn DrawEdge SetCursorPos CopyIcon GetDCEx LockWindowUpdate RegisterClipboardFormatW UpdateLayeredWindow MonitorFromPoint GetComboBoxInfo SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps CheckMenuItem SetRectEmpty SendDlgItemMessageA GetWindowLongW GetWindowTextLengthW GetScrollPos SetScrollPos SetFocus PostThreadMessageW WaitMessage GetKeyboardLayout IsCharLowerW MapVirtualKeyExW ToUnicodeEx GetKeyboardState CreateAcceleratorTableW DestroyAcceleratorTable RemoveMenu AppendMenuW InsertMenuW GetMenuItemCount GetMenuItemID GetSubMenu GetMenuState GetMenuStringW GetDesktopWindow DrawIcon PtInRect OffsetRect DrawFocusRect MapWindowPoints ScreenToClient GetSystemMetrics ReleaseCapture SetCapture GetCapture GetMessagePos DrawFrameControl UnregisterClassW GetWindow GetClassNameW ReleaseDC GetDC LoadImageW IsRectEmpty FrameRect IsWindow EnumWindows GetWindowTextW EnableMenuItem GetSystemMenu PeekMessageW GetKeyState MessageBeep SetRect GetCaretPos keybd_event InflateRect SubtractRect KillTimer SetTimer UpdateWindow PostMessageW GetFocus FillRect CopyRect IsZoomed LoadBitmapW GetClientRect GetSysColor DrawTextW GetParent DispatchMessageW TranslateMessage GetWindowRect LoadIconW InvalidateRect EnableWindow SendMessageW SetMenuDefaultItem GetDoubleClickTime OpenClipboard ModifyMenuW CharUpperBuffW IsClipboardFormatAvailable GetUpdateRect EnumChildWindows DrawMenuBar DefFrameProcW TranslateMDISysAccel SendNotifyMessageW MonitorFromRect InSendMessage DefMDIChildProcW CreateMenu WindowFromDC GetWindowRgn GetTabbedTextExtentW GetForegroundWindow DestroyCursor SystemParametersInfoW

gdi32

PlayMetaFileRecord EnumMetaFile SetWorldTransform ModifyWorldTransform SetColorAdjustment StartDocW ArcTo PolyDraw SelectClipPath SetArcDirection ExtCreatePen MoveToEx TextOutW SetGraphicsMode PolyBezierTo PolylineTo SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx SetTextJustification OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CreateRectRgnIndirect PatBlt CombineRgn GetMapMode SetRectRgn DPtoLP GetBkColor GetCharWidthW StretchDIBits EnumFontFamiliesExW GetRgnBox CreatePalette GetNearestPaletteIndex GetPaletteEntries GetSystemPaletteEntries RealizePalette CreateDIBitmap EnumFontFamiliesW OffsetViewportOrgEx GetDIBits SetPixel StretchBlt SetDIBColorTable CreateEllipticRgn Ellipse CreatePolygonRgn Polygon Polyline CreateRoundRectRgn LPtoDP OffsetRgn GetCurrentObject RoundRect FillRgn FrameRgn GetBoundsRect PtInRegion ExtFloodFill SetPaletteEntries SetPixelV GetWindowOrgEx GetViewportOrgEx CloseMetaFile CreateMetaFileW DeleteMetaFile EndDoc StartPage EndPage AbortDoc SetAbortProc GetROP2 GetBkMode GetNearestColor GetPolyFillMode GetStretchBltMode GetTextAlign GetTextFaceW SetMapperFlags SelectPalette ExtSelectClipRgn SetTextAlign SetTextCharacterExtra SetStretchBltMode GetDeviceCaps CreateDCW CopyMetaFileW CreateDIBSection CreateFontW ExtTextOutW Rectangle CreatePen GetTextMetricsW DeleteDC GetTextExtentPoint32W SetTextColor SetBkMode DeleteObject CreateSolidBrush GetTextColor CreateCompatibleBitmap GetObjectW CreateFontIndirectW CreateCompatibleDC BitBlt SelectObject GetStockObject SetROP2 SetPolyFillMode GetLayout SelectClipRgn SaveDC RestoreDC GetTextCharsetInfo SetMapMode RectVisible PtVisible PlayMetaFile OffsetClipRgn LineTo IntersectClipRect GetWindowExtEx GetViewportExtEx GetPixel GetObjectType GetCurrentPositionEx GetClipRgn GetClipBox ExcludeClipRect Escape CreateRectRgn CreatePatternBrush CreateHatchBrush CreateDIBPatternBrushPt SetBkColor CreateBitmap SetLayout

msimg32

TransparentBlt AlphaBlend

winspool.drv

ClosePrinter GetJobW DocumentPropertiesW OpenPrinterW

advapi32

SetFileSecurityW CryptReleaseContext CryptGenRandom RegCloseKey RegSetValueW RegOpenKeyExW RegQueryValueExW RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegSetValueExW RegEnumKeyW RegQueryValueW RegEnumKeyExW RegEnumValueW CryptAcquireContextW GetFileSecurityW

shell32

SHGetMalloc SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW DragQueryFileW DragFinish SHAddToRecentDocs ExtractIconW SHGetSpecialFolderLocation SHGetDesktopFolder SHAppBarMessage ShellExecuteExW ShellExecuteW

comctl32

ImageList_AddMasked ImageList_GetIconSize ImageList_Draw ImageList_DrawEx ImageList_BeginDrag ImageList_EndDrag ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock

shlwapi

PathIsUNCW PathFindExtensionW PathFileExistsW PathRemoveExtensionW PathRemoveFileSpecW PathStripToRootW StrFormatKBSizeW PathFindFileNameW

uxtheme

DrawThemeBackground OpenThemeData GetThemeSysColor GetWindowTheme GetThemePartSize CloseThemeData GetCurrentThemeName GetThemeColor DrawThemeText DrawThemeParentBackground IsAppThemed IsThemeBackgroundPartiallyTransparent

ole32

StgCreateDocfileOnILockBytes GetRunningObjectTable OleIsRunning CreateILockBytesOnHGlobal CreateStreamOnHGlobal OleRun CoFreeUnusedLibraries OleSetClipboard OleFlushClipboard OleIsCurrentClipboard DoDragDrop OleGetClipboard CoLockObjectExternal RegisterDragDrop RevokeDragDrop CoRegisterClassObject CoRevokeClassObject CoRegisterMessageFilter OleSetMenuDescriptor OleLockRunning StgCreateDocfile StgOpenStorage StgIsStorageFile CreateFileMoniker OleCreateMenuDescriptor OleDestroyMenuDescriptor StgOpenStorageOnILockBytes CoGetClassObject CoDisconnectObject StringFromGUID2 PropVariantCopy CLSIDFromProgID CLSIDFromString CoCreateGuid CoCreateInstance OleTranslateAccelerator IsAccelerator CoInitializeEx SetConvertStg OleRegGetUserType ReleaseStgMedium OleDuplicateData ReadFmtUserTypeStg WriteFmtUserTypeStg CreateBindCtx CoTreatAsClass WriteClassStg ReadClassStg CoTaskMemFree CoTaskMemAlloc StringFromCLSID CoInitialize CoUninitialize OleUninitialize OleInitialize OleRegGetMiscStatus OleRegEnumVerbs WriteClassStm GetHGlobalFromILockBytes CreateGenericComposite CreateItemMoniker OleCreate OleCreateFromData OleCreateLinkFromData OleCreateStaticFromData OleCreateLinkToFile OleCreateFromFile OleLoad OleSave OleSaveToStream OleSetContainedObject OleGetIconOfClass CreateDataAdviseHolder CoGetMalloc OleQueryCreateFromData OleQueryLinkFromData CreateOleAdviseHolder

oleaut32

VarBstrFromDate VarBstrFromCy VarCyFromStr VarDateFromStr VariantCopy VarDecFromStr SafeArrayCopy SafeArrayPutElement SafeArrayGetElement SafeArrayUnaccessData SafeArrayAccessData SafeArrayUnlock SafeArrayLock SafeArrayGetLBound SafeArrayGetUBound SafeArrayGetElemsize SafeArrayGetDim OleCreateFontIndirect VarBstrFromDec SafeArrayPtrOfIndex SafeArrayRedim SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor SafeArrayCreate SafeArrayAllocData SafeArrayAllocDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysStringLen SysReAllocStringLen RegisterTypeLi LoadRegTypeLi LoadTypeLi SysAllocString VariantChangeType VariantClear VariantInit SysAllocStringLen SysAllocStringByteLen SysStringByteLen SysFreeString

oledlg

OleUIBusyW

config

Config_GetInstance

gdiplus

GdipDrawImageRectI GdipSetInterpolationMode GdipCreateFromHDC GdipCreateBitmapFromHBITMAP GdipDrawImageI GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromFileICM GdipCreateBitmapFromStreamICM GdipCreateBitmapFromFile GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdiplusStartup GdipFree GdipAlloc GdiplusShutdown

oleacc

AccessibleObjectFromWindow CreateStdAccessibleObject LresultFromObject

imm32

ImmReleaseContext ImmGetContext ImmGetOpenStatus

winmm

PlaySoundW

generic

count=30, id=259, version=26213,

count=2, id=199, version=41118,

count=38, id=260, version=26213,

count=212, id=261, version=26213,

count=3, id=262, version=26213,

count=2, id=19, version=8034,

count=35, id=260, version=27521,

count=26, id=259, version=27521,

count=386, id=261, version=27521,

count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=6, id=257, productName=VS2019 v16.1.2 build 27702, version=27702,

count=2, id=156, productName=VS2010 build 30319, version=30319,

count=4, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=37, id=257, version=26213,

count=832, id=1, productName=Unmarked objects,

count=44, id=261, productName=VS2019 v16.1.2 build 27702, version=27702,

count=3, id=260, productName=VS2019 v16.1.2 build 27702, version=27702,

count=1, id=255, productName=VS2019 v16.1.2 build 27702, version=27702,

count=1, id=151,

count=1, id=258, productName=VS2019 v16.1.2 build 27702, version=27702,