2026-10-08_5c284264cff4de4943d82b38acefac7b_amadey_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-08_5c284264cff4de4943d82b38acefac7b_amadey_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_smoke-loader
Size 23.0MB
Sample261009-q76mrays9j
SHA256 365a9d99864ac33f3dc37eaea071fd0f1e7d694435fe58236df7910f8d28628d
MD5 5c284264cff4de4943d82b38acefac7b
SHA1 9265aef6f98fbace41439280bd44f57666df937f
SHA512 612bb3bb868a40aa94daaf095da126da74a9cc556f0869d24aee7df9ea3a6f751e9484c46d519c077d8d183a708b44a07387f9b5b3c68de55675002099632a25
SSDEEP 393216:o6BEO6WLa6XTQGpJNtvOjaos5u7cAFFmTiRhQ7s81DLKTIlDmm8/QxC4XF+/34Eo:z6W/kWtvRV5uwMmGR78FKiCmCQxJu3Zo
TLSH
T18F37223278008032E6F202B195BD57BA8A5C5D351F18DDDF93AC7B688A35CE26E37527
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-08_5c284264cff4de4943d82b38acefac7b_amadey_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_smoke-loader

File Explorer

2026-10-08_5c284264cff4de4943d82b38acefac7b_amadey_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_smoke-loader

.exe 23.0MB

2026-10-08_5c284264cff4de4943d82b38acefac7b_amadey_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_smoke-loader

IMPHASH aaaa0e13d8d4356b80d4443301056b89
SHA256 365a9d99864ac33f3dc37eaea071fd0f1e7d694435fe58236df7910f8d28628d
MD5 5c284264cff4de4943d82b38acefac7b
SHA1 9265aef6f98fbace41439280bd44f57666df937f
SHA512 612bb3bb868a40aa94daaf095da126da74a9cc556f0869d24aee7df9ea3a6f751e9484c46d519c077d8d183a708b44a07387f9b5b3c68de55675002099632a25
SSDEEP 393216:o6BEO6WLa6XTQGpJNtvOjaos5u7cAFFmTiRhQ7s81DLKTIlDmm8/QxC4XF+/34Eo:z6W/kWtvRV5uwMmGR78FKiCmCQxJu3Zo
TLSH
T18F37223278008032E6F202B195BD57BA8A5C5D351F18DDDF93AC7B688A35CE26E37527
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1591627

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\work\work_pro\PARALLEL\TransStandalone\build\Release\Aion2Translate.pdb

winhttp

WinHttpQueryHeaders WinHttpReceiveResponse WinHttpSetCredentials WinHttpSendRequest WinHttpOpenRequest WinHttpSetTimeouts WinHttpWriteData WinHttpConnect WinHttpCloseHandle WinHttpOpen WinHttpCrackUrl

dbghelp

SymGetOptions SymSetOptions SymFromAddrW SymGetModuleBase64 SymFunctionTableAccess64 StackWalk64 SymInitialize

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress

advapi32

CryptDestroyKey CryptEncrypt CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam CryptGenRandom CryptReleaseContext CryptAcquireContextA CryptImportKey RegGetValueA RegGetValueW RegOpenKeyExW RegCloseKey

ws2_32

WSAGetLastError __WSAFDIsSet select WSASetLastError recv WSAStartup bind closesocket connect getpeername getsockname getsockopt htons ntohs ntohl socket WSAIoctl gethostbyname accept getaddrinfo freeaddrinfo recvfrom sendto listen ioctlsocket gethostname WSACleanup htonl send setsockopt

crypt32

CertFreeCertificateContext

wldap32

ord45 ord60 ord211 ord46 ord143 ord22 ord301 ord200 ord30 ord79 ord35 ord33 ord41 ord32 ord27 ord26 ord50

normaliz

IdnToUnicode IdnToAscii

comctl32

_TrackMouseEvent ord17 InitCommonControlsEx

gdiplus

GdipCreatePen1 GdipDeletePen GdipSetPenDashStyle GdipCreateFromHDC GdipDeleteGraphics GdipSetSmoothingMode GdipSetPixelOffsetMode GdipDrawLine GdipDrawPath GdipFillPath GdiplusStartup GdiplusShutdown GdipAddPathLine GdipSetPenMode GdipLoadImageFromStream GdipLoadImageFromStreamICM GdipCloneImage GdipDisposeImage GdipSetTextRenderingHint GdipSetInterpolationMode GdipDrawRectangleI GdipFillRectangleI GdipAlloc GdipCreateFontFromLogfontA GdipDeleteFont GdipDrawString GdipMeasureString GdipStringFormatGetGenericTypographic GdipDeleteStringFormat GdipCloneStringFormat GdipSetStringFormatFlags GdipSetStringFormatAlign GdipSetStringFormatLineAlign GdipSetStringFormatTrimming GdipGetImageWidth GdipGetImageHeight GdipImageGetFrameDimensionsCount GdipImageGetFrameDimensionsList GdipImageGetFrameCount GdipImageSelectActiveFrame GdipGetPropertyItemSize GdipGetPropertyItem GdipDrawImageRectI GdipTranslateWorldTransform GdipRotateWorldTransform GdipDeleteBrush GdipCreatePath GdipDeletePath GdipClosePathFigure GdipAddPathArc GdipCreateSolidFill GdipCreateFontFromDC GdipCloneBrush GdipFree

imm32

ImmGetContext ImmReleaseContext ImmSetCompositionWindow

ole32

CoTaskMemFree CoUninitialize CoInitializeEx RegisterDragDrop RevokeDragDrop DoDragDrop OleDuplicateData ReleaseStgMedium CreateStreamOnHGlobal CLSIDFromString CLSIDFromProgID OleLockRunning CoCreateInstance

oleaut32

VariantChangeType CreateErrorInfo SetErrorInfo GetErrorInfo VariantClear VariantInit SysFreeString SysAllocString

msimg32

AlphaBlend

api-ms-win-core-winrt-l1-1-0

RoInitialize RoGetActivationFactory RoUninitialize

shlwapi

PathFileExistsW UrlGetPartW

shell32

SHGetKnownFolderPath DragQueryFileW ShellExecuteW

kernel32

SetThreadpoolWait GetCPInfo UnhandledExceptionFilter CreateThreadpoolWait CloseThreadpoolTimer SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW InitializeSListHead RtlUnwind SetThreadpoolTimer CreateThreadpoolTimer InterlockedPushEntrySList InterlockedFlushSList TlsAlloc TlsGetValue TlsSetValue GetCurrentProcessorNumber FlushProcessWriteBuffers CreateSemaphoreExW CreateEventExW GetNativeSystemInfo GetExitCodeThread SwitchToThread GetModuleHandleExW CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns InitOnceComplete InitOnceBeginInitialize TryAcquireSRWLockShared SleepConditionVariableSRW TryAcquireSRWLockExclusive CreateSymbolicLinkW CloseThreadpoolWait CreateHardLinkW CreateDirectoryExW DeviceIoControl AreFileApisANSI GetTempPathW SetFileInformationByHandle SetFileAttributesW GetFullPathNameW GetFinalPathNameByHandleW GetFileInformationByHandle GetFileAttributesExW GetDiskFreeSpaceExW FindFirstFileExW GetLocaleInfoEx TlsFree ExitThread FreeLibraryAndExitThread lstrcpyW EncodePointer SetConsoleCtrlHandler LockFileEx UnlockFileEx GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime SetFilePointerEx GetConsoleMode ReadConsoleW GetConsoleCP HeapFree HeapAlloc GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW LCMapStringEx GetStringTypeW GetFileInformationByHandleEx CompareStringEx IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetTimeZoneInformation IsValidCodePage GetOEMCP SetStdHandle SetEndOfFile HeapReAlloc GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW lstrcpynW lstrcmpiW GetLocalTime InitializeCriticalSectionAndSpinCount DecodePointer VerifyVersionInfoW GetVersionExW GetProcessHeap HeapSize WriteConsoleW WaitForThreadpoolTimerCallbacks OpenProcess ExitProcess lstrlenW LoadLibraryW GetTickCount SetCurrentDirectoryW FreeResource CreateFileW WriteFile CloseHandle GetLastError GetPrivateProfileStringW WritePrivateProfileStringW MultiByteToWideChar GetFileAttributesW ReleaseMutex WaitForSingleObject CreateMutexW GetCurrentProcessId GetTickCount64 GetModuleHandleW LoadResource LockResource SizeofResource FindResourceW CreateToolhelp32Snapshot Process32FirstW Process32NextW GetFileSizeEx ReadFile Sleep GlobalAlloc GlobalUnlock GlobalLock GlobalFree MulDiv IsProcessorFeaturePresent GetVersion GetCommandLineA CreateDirectoryW DeleteFileW OutputDebugStringA OutputDebugStringW InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetEvent ResetEvent CreateEventW GetSystemInfo GetStdHandle InitOnceExecuteOnce WideCharToMultiByte RtlCaptureContext GetEnvironmentVariableA GetCurrentProcess TerminateProcess GetCurrentThread GetThreadId GetSystemTimeAsFileTime GetProcAddress FindClose FindFirstFileW FindNextFileW RemoveDirectoryW GetModuleFileNameW CopyFileW MoveFileExW QueryPerformanceCounter QueryPerformanceFrequency VirtualQuery FreeLibrary LoadLibraryExW LocalFree FormatMessageW K32GetModuleFileNameExW Module32FirstW Module32NextW InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared InitializeConditionVariable WakeAllConditionVariable SleepConditionVariableCS GetCurrentThreadId WakeConditionVariable CreateThread CreateProcessW LoadLibraryA RtlCaptureStackBackTrace OpenThread SuspendThread ResumeThread GetThreadContext RaiseException GetModuleHandleA SetLastError FormatMessageA InitializeCriticalSectionEx SleepEx VerSetConditionMask GetSystemDirectoryA VerifyVersionInfoA WaitForSingleObjectEx GetFileType PeekNamedPipe WaitForMultipleObjects ExpandEnvironmentStringsA GetFileSize GetCurrentDirectoryW LocalFileTimeToFileTime SetFilePointer SetFileTime SystemTimeToFileTime GetACP

user32

PeekMessageW SendMessageW PostQuitMessage SetWindowPos IsWindowVisible IsIconic OpenClipboard CloseClipboard SetClipboardData EmptyClipboard SetTimer KillTimer GetSystemMetrics GetDC ReleaseDC SetWindowRgn GetWindowRgn InvalidateRect SetWindowTextW LoadImageW SetCursor InflateRect UnionRect OffsetRect LoadCursorW wsprintfW CharNextW GetMessageW PostMessageW CreateWindowExW IsWindow IsZoomed SetFocus GetActiveWindow GetFocus GetKeyState SetCapture ReleaseCapture BeginPaint EndPaint GetUpdateRect TranslateMessage GetWindowRect GetCursorPos SetProcessDPIAware MapWindowPoints GetSysColor IntersectRect IsRectEmpty PtInRect GetWindowLongW SetWindowLongW GetParent GetWindow MonitorFromWindow GetMonitorInfoW DefWindowProcW CallWindowProcW RegisterClassW RegisterClassExW GetClassInfoExW EnableWindow GetMenu SetPropW GetPropW AdjustWindowRectEx MonitorFromPoint UpdateWindow IsWindowEnabled UpdateLayeredWindow MoveWindow UnregisterClassW CharPrevW DrawTextW FillRect SetRect CreatePopupMenu DestroyMenu EnableMenuItem AppendMenuW TrackPopupMenu CreateCaret GetCaretBlinkTime HideCaret ShowCaret SetCaretPos GetCaretPos ClientToScreen EqualRect GetWindowTextW GetWindowTextLengthW wsprintfA DrawTextA CreateAcceleratorTableW InvalidateRgn GetGUIThreadInfo SetForegroundWindow GetKeyboardLayout GetKeyNameTextW MapVirtualKeyExW MessageBoxW ShowWindow DestroyWindow DispatchMessageW ScreenToClient GetClientRect

gdi32

IntersectClipRect GetDeviceCaps GetCurrentObject PtInRegion CombineRgn CreatePenIndirect CloseEnhMetaFile GetLayout Rectangle SaveDC CreateRectRgnIndirect CreateSolidBrush GetCharABCWidthsW GetClipBox GetTextColor GetTextExtentPoint32W SelectObject LineTo SelectClipRgn ExtSelectClipRgn RestoreDC SetBkMode StretchBlt SetStretchBltMode SetTextColor GetObjectA MoveToEx TextOutW CreatePatternBrush CreateRoundRectRgn GetTextExtentPointA GetBitmapBits SetBitmapBits CreateDIBSection GetObjectW SetViewportOrgEx SetWindowOrgEx GdiFlush CreateDIBitmap CreateFontIndirectW CreatePen BitBlt CreateCompatibleBitmap CreateCompatibleDC GetTextMetricsW PlayEnhMetaFile GetEnhMetaFileHeader SetBkColor CreateRectRgn RemoveFontMemResourceEx CreateEnhMetaFileW GetStockObject GetViewportOrgEx AddFontMemResourceEx DeleteDC DeleteObject

api-ms-win-core-winrt-error-l1-1-0

GetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringRawBuffer WindowsCreateStringReference WindowsCreateString WindowsDeleteString WindowsGetStringLen

generic

count=40, id=259, version=26213,

count=204, id=261, version=26213,

count=9, id=260, version=27047,

count=20, id=261, version=27047,

count=5, id=253, version=35207,

count=22, id=260, version=35207,

count=29, id=259, version=35207,

count=103, id=261, version=35207,

count=45, id=260, version=26213,

count=1, id=263, version=26213,

count=52, id=261, version=27048,

count=10, id=257, version=25711,

count=100, id=260, productName=VS2017 v15.8.0 build 26726, version=26726,

count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=29, id=257, version=26213,

count=565, id=1, productName=Unmarked objects,

count=62, id=260, version=35213,

count=12, id=261, version=35213,

count=1, id=255, version=35213,

count=3, id=151,

count=1, id=258, version=35213,