2026-09-29_ad4dbf7acdf24abf9b1ad1d8088e3159_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat

General

Target
2026-09-29_ad4dbf7acdf24abf9b1ad1d8088e3159_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat
Size 11.6MB
Sample260930-v3klyaeb24
SHA256 aa2a41d3380c9a7b6a87a87c2b37d813b19e93f787a3af2b79bbfe434a0a17c2
MD5 ad4dbf7acdf24abf9b1ad1d8088e3159
SHA1 b4593336a1c5e3309169fca95c7454421e80d9dc
SHA512 3ac420b398c802247d88204ee29a9195efb115a506b9f3dc94f5a965ffdc8926847eed59e02f17c9c6f8281649700c483b14de8ca0858cd90b2b626896ac7bbc
SSDEEP 196608:7HrB4gAtGisca+HNSSJcQGp90noYHwoQd9f2O2OKpxi8kzjTp7N0v:7HGTtfk+HMSJcQGp98i/2Di8kjR6
TLSH
T197C6D051BA02E0ABD19506784C179FAB9D3B3ED243109BC3ED9C7BED88625C612EF705
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_ad4dbf7acdf24abf9b1ad1d8088e3159_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat

File Explorer

2026-09-29_ad4dbf7acdf24abf9b1ad1d8088e3159_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat

.exe 11.6MB

2026-09-29_ad4dbf7acdf24abf9b1ad1d8088e3159_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat

IMPHASH 067e4d41b3cf1c6e26686ed3286d2377
SHA256 aa2a41d3380c9a7b6a87a87c2b37d813b19e93f787a3af2b79bbfe434a0a17c2
MD5 ad4dbf7acdf24abf9b1ad1d8088e3159
SHA1 b4593336a1c5e3309169fca95c7454421e80d9dc
SHA512 3ac420b398c802247d88204ee29a9195efb115a506b9f3dc94f5a965ffdc8926847eed59e02f17c9c6f8281649700c483b14de8ca0858cd90b2b626896ac7bbc
SSDEEP 196608:7HrB4gAtGisca+HNSSJcQGp90noYHwoQd9f2O2OKpxi8kzjTp7N0v:7HGTtfk+HMSJcQGp98i/2Di8kjR6
TLSH
T197C6D051BA02E0ABD19506784C179FAB9D3B3ED243109BC3ED9C7BED88625C612EF705
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

7040

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

api-ms-win-crt-heap-l1-1-0

_set_new_mode free malloc

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _cexit _configure_narrow_argv _crt_atexit _exit _initialize_narrow_environment _initterm _initterm_e _set_app_type _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vswprintf fwrite

api-ms-win-crt-string-l1-1-0

_wcsicmp strcmp wcscpy wcslen

kernel32

CloseHandle CreateFileW CreateRemoteThread CreateToolhelp32Snapshot DeleteCriticalSection DeleteFileW EnterCriticalSection FindResourceW FlushFileBuffers FreeLibrary GetExitCodeThread GetLastError GetModuleHandleW GetProcAddress GetTempPathW GetTickCount InitializeCriticalSection LeaveCriticalSection LoadLibraryExW LoadResource LockResource Module32FirstW Module32NextW MoveFileExW OpenProcess Process32FirstW Process32NextW SetUnhandledExceptionFilter SizeofResource Sleep TlsGetValue VirtualAllocEx VirtualFreeEx VirtualProtect VirtualQuery WaitForSingleObject WriteFile WriteProcessMemory

user32

MessageBoxW

api-ms-win-crt-environment-l1-1-0

__p__environ

api-ms-win-crt-math-l1-1-0

__setusermatherr

Name

.text

Size

67KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

156B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

8B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

11.0MB

Virtual Size

11.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

568KB

Virtual Size

572KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-29_ad4dbf7acdf24abf9b1ad1d8088e3159_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

kernel32

user32

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

generic