2026-09-21_fdd454832c8247d92327a051c5bbf6d7_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-21_fdd454832c8247d92327a051c5bbf6d7_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-stealer_lynx_njrat
Size 407KB
Sample260922-kr4kkasdph
SHA256 e11d4aeb673c7abf3296c236ca69841965c86a7f8134fdffc2cd0a696e400cc5
MD5 fdd454832c8247d92327a051c5bbf6d7
SHA1 b876bdbdd9114bf84724fbae962cda5c92e14ab5
SHA512 1c7ff04a4e9e3592957e93143310a2ce0e2168944f0333e8297b327d640e99c624199d93567cef258285e0d6f387013542d0774f519f6f3f6d47694fb96efce3
SSDEEP 6144:R9lZF6/r3s2N1n+dbbCY6MjYfnM8yiyyKx8MVmsLQey/cY30zn2:R9Cr82Nd+dbbCY6oYfnQyDI/Ykz2
TLSH
T1B394691275C0C035C8621031BEA9FE71567EBE304B7259CB67D43A6A4B3CED29A32B57
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-21_fdd454832c8247d92327a051c5bbf6d7_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-stealer_lynx_njrat

File Explorer

2026-09-21_fdd454832c8247d92327a051c5bbf6d7_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-stealer_lynx_njrat

.exe 407KB

2026-09-21_fdd454832c8247d92327a051c5bbf6d7_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-stealer_lynx_njrat

IMPHASH f0f1c78ede68cd359bbee49b2c143e1b
SHA256 e11d4aeb673c7abf3296c236ca69841965c86a7f8134fdffc2cd0a696e400cc5
MD5 fdd454832c8247d92327a051c5bbf6d7
SHA1 b876bdbdd9114bf84724fbae962cda5c92e14ab5
SHA512 1c7ff04a4e9e3592957e93143310a2ce0e2168944f0333e8297b327d640e99c624199d93567cef258285e0d6f387013542d0774f519f6f3f6d47694fb96efce3
SSDEEP 6144:R9lZF6/r3s2N1n+dbbCY6MjYfnM8yiyyKx8MVmsLQey/cY30zn2:R9Cr82Nd+dbbCY6oYfnQyDI/Ykz2
TLSH
T1B394691275C0C035C8621031BEA9FE71567EBE304B7259CB67D43A6A4B3CED29A32B57
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

147328

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLastError LockResource HeapReAlloc FindResourceExW LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy DeleteCriticalSection GetProcessHeap CreateDirectoryW MultiByteToWideChar GetCommandLineW FindNextFileW FindClose OpenEventW CreateEventW GetTickCount64 DeleteFileW WideCharToMultiByte GetTickCount SetEndOfFile WriteConsoleW CreateFileW SetStdHandle HeapSize InitializeCriticalSectionEx HeapFree FindFirstFileW SizeofResource SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindFirstFileExW GetTimeZoneInformation ReadConsoleW ReadFile EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW CloseHandle GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetFileType SetFilePointerEx GetFileSizeEx QueryPerformanceCounter EnterCriticalSection LeaveCriticalSection EncodePointer LocalFree GetLocaleInfoEx LCMapStringEx ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetStringTypeW CompareStringEx GetCPInfo IsDebuggerPresent OutputDebugStringW RaiseException IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcessId GetCurrentThreadId InitializeSListHead GetCurrentProcess TerminateProcess RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile

user32

wsprintfW

advapi32

RegOpenKeyExW RegCreateKeyW RegQueryValueExW RegCloseKey

shell32

ShellExecuteW CommandLineToArgvW

ole32

CoCreateInstance CoSetProxyBlanket CoInitializeSecurity CoInitializeEx CoUninitialize

oleaut32

VariantClear SysAllocString SysFreeString

urlmon

URLDownloadToFileW

rpcrt4

UuidToStringW UuidCreate RpcStringFreeW

winhttp

WinHttpReceiveResponse WinHttpOpenRequest WinHttpCloseHandle WinHttpSendRequest WinHttpSetTimeouts WinHttpConnect WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-21_fdd454832c8247d92327a051c5bbf6d7_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-stealer_lynx_njrat

kernel32

user32

advapi32

shell32

ole32

oleaut32

urlmon

rpcrt4

winhttp

generic