Overview

overview

6

Static

static

1

2026-09-29...il.exe

windows10-2004-x64

6

2026-09-29...il.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-09-29_417c01da6ac9662dea9017e872951102_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_revil
  • Size 2.6MB
  • Sample260930-1lex1sba69
  • SHA256 1c9358bf9b8fe6058e11d0c60e8b1d756cab9978a8e2836e3c9a90e34871dc74
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-09-29_417c01da6ac9662dea9017e872951102_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_revil
    .exe 2.6MB

2026-09-29_417c01da6ac9662dea9017e872951102_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat_revil

  • IMPHASH 92754b5e79f1d724cf553710c3d41403
  • SHA256 1c9358bf9b8fe6058e11d0c60e8b1d756cab9978a8e2836e3c9a90e34871dc74
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:6windowsx86arch:x86
Digest
4f:e7:46:25:bf:c0:b1:ca:2a:67:19:e0:3d:17:f2:e4:0c:4c:1c:2a:00:d8:3a:77:0d:56:7d:4f:30:43:e7:6e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91430104MA4L5AT615,CN=湖南南澳网络科技有限公司,O=湖南南澳网络科技有限公司,L=长沙市,ST=湖南省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b998e6b19fe696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e6b996e58d97e79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Digest
8e:44:6a:38:5c:8d:d5:cf:4d:05:9c:15:74:7e:38:9b:78:f4:ac:4f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91430104MA4L5AT615,CN=湖南南澳网络科技有限公司,O=湖南南澳网络科技有限公司,L=长沙市,ST=湖南省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b998e6b19fe696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e6b996e58d97e79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Minor OS version
0
Major OS version
6
Entry point
1399605
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
E:\上号模块\zuhao\LiteClient\code\LiteClient\Output\Release\LiteClient.pdb