2026-09-28_08237c0ce7c83021e276e6ea28de0407_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-28_08237c0ce7c83021e276e6ea28de0407_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader
Size 2.8MB
Sample260929-pddjfaha28
SHA256 55ed1420627c4100d16d8ffc9d8905842e85aab4f5737ba676e66a6ce103acc0
MD5 08237c0ce7c83021e276e6ea28de0407
SHA1 9d123cd3672022a71cc2f1fce684154cc838a39c
SHA512 ad2e1e07bdc396f762abb0dc54d61e9601a6c397e0e9bac0f2bf28d2989dfed9199332611c87dd935f545139da3247276870b3c215db6c9a245601018a4edcfb
SSDEEP 49152:akhsnRNPAiyDuCAFs7sM9X19Sm0xVsxbzpyjadrWVHZjj5wmeDVXjj09iRVokvW8:akhqAi6D7/XEV6jKdtoNjjJRVXW8yNJS
TLSH
T1D6D51220B532C036D86280714DB8EBBA567EBE381B6145DBB3D43EBD19305D22B35E67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-28_08237c0ce7c83021e276e6ea28de0407_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

File Explorer

2026-09-28_08237c0ce7c83021e276e6ea28de0407_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

.exe 2.8MB

2026-09-28_08237c0ce7c83021e276e6ea28de0407_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

IMPHASH 0934a4aeaba4b53c72fe368162a800c9
SHA256 55ed1420627c4100d16d8ffc9d8905842e85aab4f5737ba676e66a6ce103acc0
MD5 08237c0ce7c83021e276e6ea28de0407
SHA1 9d123cd3672022a71cc2f1fce684154cc838a39c
SHA512 ad2e1e07bdc396f762abb0dc54d61e9601a6c397e0e9bac0f2bf28d2989dfed9199332611c87dd935f545139da3247276870b3c215db6c9a245601018a4edcfb
SSDEEP 49152:akhsnRNPAiyDuCAFs7sM9X19Sm0xVsxbzpyjadrWVHZjj5wmeDVXjj09iRVokvW8:akhqAi6D7/XEV6jKdtoNjjJRVXW8yNJS
TLSH
T1D6D51220B532C036D86280714DB8EBBA567EBE381B6145DBB3D43EBD19305D22B35E67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

252480

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\WorkSpace\QClawDownloader\QQPCDownload\bin\release\kpacket.pdb

kernel32

FindNextFileW HeapDestroy HeapSize HeapReAlloc HeapFree HeapAlloc GetProcessHeap SizeofResource LockResource LoadResource FindResourceW FindResourceExW GetFileSize GetTickCount DeleteFileW MoveFileExW CopyFileW CreateFileMappingW MapViewOfFile UnmapViewOfFile WriteFile CreateDirectoryW GetLastError GetSystemDirectoryW ReadFile GetStdHandle EnterCriticalSection LeaveCriticalSection WaitForMultipleObjects MultiByteToWideChar WideCharToMultiByte GetWindowsDirectoryW SetFileTime SetFileAttributesW RemoveDirectoryW GetCurrentDirectoryW GetTempPathW GetTempFileNameW SetEndOfFile GetSystemInfo GetProcAddress GetModuleHandleW VirtualFree VirtualAlloc ReleaseSemaphore InitializeCriticalSection WaitForSingleObject CreateEventW SetEvent ResetEvent CreateSemaphoreW GetModuleFileNameW CreateProcessW LoadLibraryW GetCurrentProcessId GetCurrentProcess TerminateProcess lstrcmpW ExpandEnvironmentStringsW GetCommandLineW InitializeCriticalSectionAndSpinCount RaiseException DecodePointer SystemTimeToFileTime LocalFileTimeToFileTime GetConsoleOutputCP FlushFileBuffers SetStdHandle FreeEnvironmentStringsW WriteConsoleW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP CloseHandle CreateFileW FindClose FindFirstFileW GetFileAttributesW SetFilePointer DeleteCriticalSection IsValidCodePage FindFirstFileExW GetFileSizeEx GetConsoleMode SetFilePointerEx EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW GetFileType ExitProcess GetModuleHandleExW FreeLibraryAndExitThread IsDebuggerPresent OutputDebugStringW InitializeCriticalSectionEx EncodePointer GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent WaitForSingleObjectEx GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetFileAttributesExW CreateThread ExitThread

user32

CharUpperW CharLowerW

advapi32

RegOpenKeyExW RegQueryValueExW RegCloseKey

ole32

CoUninitialize CoInitialize

oleaut32

SysAllocString VariantClear VariantCopy SysFreeString

shlwapi

PathFileExistsW PathRemoveFileSpecW PathAddBackslashW PathIsDirectoryW PathAppendW

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-28_08237c0ce7c83021e276e6ea28de0407_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader

kernel32

user32

advapi32

ole32

oleaut32

shlwapi

generic