General

  • Target
    2026-10-04_e816e6f58caed5e8c70cef7e3f5112ce_amadey_darkgate_elex_floxif_glassworm_luca-stealer_njrat_smoke-loader
  • Size 2.4MB
  • Sample261004-3cel1attes
  • SHA256 ce5e19607140d15adc7d7d4b36a48db2d3b5cce48f05055c41abfe64d8ddb2be
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-10-04_e816e6f58caed5e8c70cef7e3f5112ce_amadey_darkgate_elex_floxif_glassworm_luca-stealer_njrat_smoke-loader
    .exe 2.4MB

2026-10-04_e816e6f58caed5e8c70cef7e3f5112ce_amadey_darkgate_elex_floxif_glassworm_luca-stealer_njrat_smoke-loader

  • IMPHASH d7a82860672e83b94a865dbc45905fa4
  • SHA256 ce5e19607140d15adc7d7d4b36a48db2d3b5cce48f05055c41abfe64d8ddb2be
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
d3:97:cd:2f:25:12:42:69:df:f8:1b:16:99:4a:4b:ed:f2:ee:14:30:20:0b:69:0b:18:56:91:6e:98:6c:0c:2b
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=ESTsoft Corp.,O=ESTsoft Corp.,L=Seocho-gu,ST=Seoul,C=KR

PE Signature issue

Digest
62:81:4d:38:6c:11:cc:aa:f9:65:44:d4:61:80:98:38:b7:79:7f:a4
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=ESTsoft Corp.,O=ESTsoft Corp.,L=Seocho-gu,ST=Seoul,C=KR
Minor OS version
0
Major OS version
6
Entry point
1510306
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Data\src\alpopskin-windows\bin\x86\Release\popats_ui.pdb