2026-09-23_d78fa49e9c04e3f431e7852bd7f10c85_amadey_darkgate_elex_luca-stealer_lynx_medusalocker_njrat_remcos

General

Target
2026-09-23_d78fa49e9c04e3f431e7852bd7f10c85_amadey_darkgate_elex_luca-stealer_lynx_medusalocker_njrat_remcos
Size 2.4MB
Sample260924-beew1aae33
SHA256 488415a15413a73a0983183e340116374fa3556ac0f7951520355ec3d8659ea1
MD5 d78fa49e9c04e3f431e7852bd7f10c85
SHA1 888707e9355401175fff256605a8d2d1defda356
SHA512 cdbf06718496ded7684702cc6222c58bdadd3af5b31e4c42e5f7f2ee7241f24baf3035da43496b0e851819de192c06b8f145c38e800e75641c9332c1d1f9db87
SSDEEP 49152:O4+5zNZ7444+YRYf1BvsIcJ1c0tOe7H730INfebZMzGVofKbv6+:x+5zNF477CBEIcJ1hOenErZMzGVofKl
TLSH
T1DDB59D21B9178133ECB702F1897DBB6F945DBE34072441E7A2C82EAE69305D36E3561B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-23_d78fa49e9c04e3f431e7852bd7f10c85_amadey_darkgate_elex_luca-stealer_lynx_medusalocker_njrat_remcos

File Explorer

2026-09-23_d78fa49e9c04e3f431e7852bd7f10c85_amadey_darkgate_elex_luca-stealer_lynx_medusalocker_njrat_remcos

.exe 2.4MB

2026-09-23_d78fa49e9c04e3f431e7852bd7f10c85_amadey_darkgate_elex_luca-stealer_lynx_medusalocker_njrat_remcos

SHA256 488415a15413a73a0983183e340116374fa3556ac0f7951520355ec3d8659ea1
MD5 d78fa49e9c04e3f431e7852bd7f10c85
SHA1 888707e9355401175fff256605a8d2d1defda356
SHA512 cdbf06718496ded7684702cc6222c58bdadd3af5b31e4c42e5f7f2ee7241f24baf3035da43496b0e851819de192c06b8f145c38e800e75641c9332c1d1f9db87
SSDEEP 49152:O4+5zNZ7444+YRYf1BvsIcJ1c0tOe7H730INfebZMzGVofKbv6+:x+5zNF477CBEIcJ1hOenErZMzGVofKl
TLSH
T1DDB59D21B9178133ECB702F1897DBB6F945DBE34072441E7A2C82EAE69305D36E3561B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

450338

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

generic

count=11, id=260, version=27054,

count=41, id=259, version=30795,

count=205, id=261, version=30795,

count=2, id=260, version=27034,

count=1, id=263, version=30795,

count=10, id=261, version=27050,

count=1, id=261, version=27051,

count=67, id=261, version=27053,

count=11, id=261, productName=VS2017 v15.7.5 build 26433, version=26433,

count=7, id=261, version=27032,

count=1, id=199, version=41118,

count=140, id=261, version=26706,

count=40, id=260, version=26706,

count=26, id=259, version=26706,

count=51, id=260, version=30795,

count=1, id=262, version=30795,

count=41, id=257, version=30795,

count=587, id=1, productName=Unmarked objects,

count=49, id=261, version=27054,

count=1, id=255, version=27054,

count=1, id=151,

count=1, id=258, version=27054,

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-23_d78fa49e9c04e3f431e7852bd7f10c85_amadey_darkgate_elex_luca-stealer_lynx_medusalocker_njrat_remcos

generic