2026-09-30_5d93edb82ac3d90ae612634a9e461e35_amadey_coinminer_darkgate_elex_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-30_5d93edb82ac3d90ae612634a9e461e35_amadey_coinminer_darkgate_elex_luca-stealer_lynx_njrat
Size 1.8MB
Sample260930-m8ry7sscqf
SHA256 9df47b4abc3b4a7436816d38a8351eda4f026d5939d537010d8fe49a4a72975a
MD5 5d93edb82ac3d90ae612634a9e461e35
SHA1 06379d43c7b3de5dda57c090b3a9732bc9097fb2
SHA512 73dc8b81d3bfd462c75738177f4c5cfbdcb3eb028131b89bfa97c47d3baec1b0a7165588a6e4ea080d1af30b536456652e893aae7b6678460e5b67026f3240c7
SSDEEP 49152:oChQVGXkOCwb9TCXMfJhC0D/m4Gq7IBAaci+n953z:oyOwIMfJb/+q7Ccr953z
TLSH
T1E285E011B522E077E49101B153BABFE195FC6F20076948DB73E0FF2A7A211C3257BA5A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_5d93edb82ac3d90ae612634a9e461e35_amadey_coinminer_darkgate_elex_luca-stealer_lynx_njrat

File Explorer

2026-09-30_5d93edb82ac3d90ae612634a9e461e35_amadey_coinminer_darkgate_elex_luca-stealer_lynx_njrat

.exe 1.8MB

2026-09-30_5d93edb82ac3d90ae612634a9e461e35_amadey_coinminer_darkgate_elex_luca-stealer_lynx_njrat

IMPHASH 0dbe7bde25528ea3b1afa7eca96766c2
SHA256 9df47b4abc3b4a7436816d38a8351eda4f026d5939d537010d8fe49a4a72975a
MD5 5d93edb82ac3d90ae612634a9e461e35
SHA1 06379d43c7b3de5dda57c090b3a9732bc9097fb2
SHA512 73dc8b81d3bfd462c75738177f4c5cfbdcb3eb028131b89bfa97c47d3baec1b0a7165588a6e4ea080d1af30b536456652e893aae7b6678460e5b67026f3240c7
SSDEEP 49152:oChQVGXkOCwb9TCXMfJhC0D/m4Gq7IBAaci+n953z:oyOwIMfJb/+q7Ccr953z
TLSH
T1E285E011B522E077E49101B153BABFE195FC6F20076948DB73E0FF2A7A211C3257BA5A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

596817

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\agent\workspace\p-34eb88c94f1449d1b342f8071f58cae7\src\bugly_windows_build_env\crashpad\out\x86_release\crashpad_handler.pdb

kernel32

GetFileSizeEx CreateFileW GetPrivateProfileStringW CloseHandle GetCurrentThreadId FormatMessageW GetLocalTime GetCurrentProcessId EnterCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection SetLastError GetFileInformationByHandleEx GetCurrentProcess RegisterWaitForSingleObject GetQueuedCompletionStatus WaitForSingleObject DuplicateHandle DisconnectNamedPipe OpenProcess PostQueuedCompletionStatus CreateEventW Sleep SetEvent LoadLibraryW CreateThread UnregisterWaitEx CreateIoCompletionPort LoadLibraryExW ConnectNamedPipe ExitProcess CreateDirectoryW FindFirstFileExW RemoveDirectoryW GetFileAttributesW DeleteFileW GetFileTime SetNamedPipeHandleState CreateNamedPipeW GetVersion TransactNamedPipe WaitNamedPipeW FindClose TerminateProcess ReleaseSemaphore CreateSemaphoreW GetStdHandle WriteFile SetEndOfFile UnlockFileEx SetFilePointerEx LockFileEx GetFileType FormatMessageA GetSystemTimeAsFileTime FindNextFileW LocalFree GetTimeZoneInformation GetSystemInfo IsProcessorFeaturePresent VerSetConditionMask VerifyVersionInfoW SuspendThread ResumeThread GetThreadContext GetProcessTimes GetSystemDefaultLCID GetThreadLocale GetUserDefaultLCID CreateProcessW IsWow64Process WriteProcessMemory VirtualAllocEx ReadProcessMemory SleepEx IsDebuggerPresent UnmapViewOfFile CreateFileMappingW MapViewOfFile DeviceIoControl CreateFileA SizeofResource SetUnhandledExceptionFilter LockResource GlobalAlloc GlobalFree FindResourceExW IsDBCSLeadByte LoadResource FindResourceW CreateTimerQueue lstrcpyW GlobalUnlock WideCharToMultiByte GetPrivateProfileSectionW VirtualFree VirtualAlloc VirtualProtect GetModuleHandleW GetProcessHeap DeleteCriticalSection GetProcAddress HeapDestroy DecodePointer HeapAlloc RaiseException HeapReAlloc LoadLibraryA GetLastError HeapSize InitializeCriticalSectionEx SetProcessShutdownParameters GetModuleFileNameW LoadLibraryExA SwitchToThread InitializeCriticalSection VirtualQueryEx WriteConsoleW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage SetStdHandle GetFullPathNameW GetCurrentDirectoryW ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW GetModuleHandleExW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime PeekNamedPipe GetFileInformationByHandle GetDriveTypeW GetCommandLineW GetCommandLineA FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc RtlUnwind GetStartupInfoW InitializeSListHead UnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable GetCPInfo InitOnceExecuteOnce LCMapStringEx EncodePointer TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive GetStringTypeW QueryPerformanceFrequency QueryPerformanceCounter ReadFile DeleteTimerQueueTimer DeleteTimerQueueEx CreateTimerQueueTimer OutputDebugStringW GetProcessId GlobalLock WritePrivateProfileStringW HeapFree MultiByteToWideChar SetConsoleCtrlHandler

advapi32

BuildSecurityDescriptorW RegDeleteValueW RegOpenKeyExW RegOpenKeyExA RegQueryValueExA RegQueryValueExW BuildExplicitAccessWithNameW ConvertStringSecurityDescriptorToSecurityDescriptorW SystemFunction036 RevertToSelf ImpersonateNamedPipeClient RegCloseKey RegCreateKeyExW RegSetValueExW

user32

UnregisterClassW CreateWindowExW GetWindowLongW SetWindowLongW DefWindowProcW PostMessageW TranslateMessage DispatchMessageW RegisterClassW GetMessageW EnableWindow EndPaint BeginPaint InvalidateRect LoadImageW DialogBoxParamW GetSysColorBrush DestroyWindow GetWindowTextW KillTimer DrawIconEx DrawTextW GetClientRect MapDialogRect SetClipboardData SendDlgItemMessageW MapWindowPoints SetDlgItemTextW EmptyClipboard CloseClipboard ClientToScreen SetTimer OpenClipboard GetWindowTextLengthW EndDialog GetDlgItem GetWindowThreadProcessId GetMenuItemCount CreatePopupMenu TrackPopupMenu IsWindow DestroyMenu RegisterClipboardFormatW GetKeyState CallWindowProcW GetWindowRect SetWindowPos SendMessageW SetWindowTextW ShowWindow

winhttp

WinHttpWriteData WinHttpCloseHandle WinHttpOpenRequest WinHttpReadData WinHttpSetTimeouts WinHttpAddRequestHeaders WinHttpOpen WinHttpReceiveResponse WinHttpCrackUrl WinHttpSendRequest WinHttpConnect WinHttpQueryHeaders

powrprof

CallNtPowerInformation

ole32

OleUninitialize CoTaskMemFree CoCreateGuid StringFromCLSID OleInitialize DoDragDrop

shlwapi

PathRemoveFileSpecW PathFileExistsW

gdiplus

GdiplusStartup

comctl32

InitCommonControlsEx ImageList_Create ImageList_ReplaceIcon

gdi32

SetBkMode SetTextColor GetStockObject CreateFontW SelectObject DeleteObject

oleaut32

SysStringLen SysFreeString SysStringByteLen SysAllocStringByteLen SysAllocString

shell32

SHGetDesktopFolder SHBindToParent ord155 SHGetFileInfoW ShellExecuteW

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-30_5d93edb82ac3d90ae612634a9e461e35_amadey_coinminer_darkgate_elex_luca-stealer_lynx_njrat

kernel32

advapi32

user32

winhttp

powrprof

ole32

shlwapi

gdiplus

comctl32

gdi32

oleaut32

shell32

version

generic