2026-10-11_4d93c3518146069fe7deb5972881542e_amadey_darkgate_elex_luca-stealer_lynx_njrat

General

Target
2026-10-11_4d93c3518146069fe7deb5972881542e_amadey_darkgate_elex_luca-stealer_lynx_njrat
Size 3.3MB
Sample261012-113bvsfz2y
SHA256 4005833dbd456eea9f1017c09fcc0274736b594775b2498eb90cb5aedad1f9dd
MD5 4d93c3518146069fe7deb5972881542e
SHA1 d075dc7221886c64d675413d94918a548121a9ef
SHA512 5063b3e6dfc51acca0ce1b08492c17e20d341c89109b93324708d8db5736ce793254b1a851a8882f035eb0ce17c673735dbbbf5e5f7ba38cf0e143e2f282362a
SSDEEP 49152:wc5nqEHYWV21v8Uo4wAeyfvE0Z3R0vnxn1o2d5jZzu37WB+kn3Hnx:w8qEHYWVpAeKtEnW2LL+k
TLSH
T1FDF5AF21B2D18120E1B39370297DA7EA5B79BC356F76408F32DCB6390B725C09D75B2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-11_4d93c3518146069fe7deb5972881542e_amadey_darkgate_elex_luca-stealer_lynx_njrat

File Explorer

2026-10-11_4d93c3518146069fe7deb5972881542e_amadey_darkgate_elex_luca-stealer_lynx_njrat

.exe 3.3MB

2026-10-11_4d93c3518146069fe7deb5972881542e_amadey_darkgate_elex_luca-stealer_lynx_njrat

IMPHASH 362dc034678576de221f648ab65b8991
SHA256 4005833dbd456eea9f1017c09fcc0274736b594775b2498eb90cb5aedad1f9dd
MD5 4d93c3518146069fe7deb5972881542e
SHA1 d075dc7221886c64d675413d94918a548121a9ef
SHA512 5063b3e6dfc51acca0ce1b08492c17e20d341c89109b93324708d8db5736ce793254b1a851a8882f035eb0ce17c673735dbbbf5e5f7ba38cf0e143e2f282362a
SSDEEP 49152:wc5nqEHYWV21v8Uo4wAeyfvE0Z3R0vnxn1o2d5jZzu37WB+kn3Hnx:w8qEHYWVpAeKtEnW2LL+k
TLSH
T1FDF5AF21B2D18120E1B39370297DA7EA5B79BC356F76408F32DCB6390B725C09D75B2A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

628884

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Jenkins\workspace\MBAM-Windows\A_MB5_MBSetup\bin\Win32\Release\MBSetup.pdb

kernel32

MulDiv HeapDestroy HeapSize HeapReAlloc HeapFree HeapAlloc GetProcessHeap FreeLibrary GetProcAddress GetModuleHandleW lstrcmpiW LeaveCriticalSection EnterCriticalSection GetLastError MultiByteToWideChar SizeofResource LoadResource FindResourceW LoadLibraryExW GetModuleFileNameW InitializeCriticalSectionEx DeleteCriticalSection RaiseException LockResource FindResourceExW WideCharToMultiByte IsWow64Process GetCurrentProcess VerifyVersionInfoW VerSetConditionMask GetSystemDirectoryW CreateFileW DeviceIoControl CloseHandle GetCurrentThreadId CreateEventW SetLastError Sleep DeleteFileW GlobalFree WaitForSingleObject LocalFree FormatMessageW LocalAlloc CallNamedPipeW GetWindowsDirectoryW SetCurrentDirectoryW SetDefaultDllDirectories GetCommandLineW DecodePointer CreateMutexW GetNativeSystemInfo GetDiskFreeSpaceExW FindFirstFileW FindClose CreateProcessW FindNextFileW GlobalAlloc GlobalLock SetThreadUILanguage LoadLibraryW CreateDirectoryW GetLogicalDrives GetTempPathW MoveFileExW InitializeProcThreadAttributeList UpdateProcThreadAttribute DeleteProcThreadAttributeList OpenProcess ResumeThread TerminateProcess GetCurrentProcessId GetModuleFileNameA ProcessIdToSessionId CreateToolhelp32Snapshot Process32FirstW Process32NextW GetLogicalDriveStringsW QueryDosDeviceW OutputDebugStringW GetLocalTime GetExitCodeProcess GetFileSizeEx GetFileAttributesW WriteConsoleW GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA FormatMessageA GetStringTypeW GetLocaleInfoEx FindFirstFileExW GetFileAttributesExW GetFileInformationByHandle SetFileInformationByHandle AreFileApisANSI CopyFileW GetFileInformationByHandleEx QueryPerformanceCounter QueryPerformanceFrequency ReleaseSRWLockExclusive AcquireSRWLockExclusive EncodePointer LCMapStringEx WakeAllConditionVariable SleepConditionVariableSRW GetSystemTimeAsFileTime GetCPInfo IsDebuggerPresent InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent VirtualAlloc VirtualFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW CreateThread ExitThread FreeLibraryAndExitThread GetCommandLineA GetStdHandle WriteFile GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx ReadFile GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadConsoleW GetTimeZoneInformation IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle SetEndOfFile

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-11_4d93c3518146069fe7deb5972881542e_amadey_darkgate_elex_luca-stealer_lynx_njrat

kernel32

generic