2026-10-12_b49dfde9601ea7a67f10619c7b36f86a_amadey_darkgate_elex_luca-stealer_lynx_njrat

General

Target
2026-10-12_b49dfde9601ea7a67f10619c7b36f86a_amadey_darkgate_elex_luca-stealer_lynx_njrat
Size 3.3MB
Sample261013-2f9qwade83
SHA256 7e6e8f3479badea9909d61b9950ac0c5aa7ea2cc733e2713f2e8271e93071083
MD5 b49dfde9601ea7a67f10619c7b36f86a
SHA1 7376ca78def645b9c270f644330a7441b0c12f39
SHA512 7fb8d7de4413a1855309197691e1fa8aa9c897e67959c4ca867c26c4ec66230068fc52a86c95379f0ab2fb63f314590c86933ee441d49df1cf0bf1a910c1a969
SSDEEP 49152:ic5nqEHAWV21v8Uo4wAeyfvE0Z3R0vnxn1o2d5jZzu377sbZjEuLqm:i8qEHAWVpAeKtEnW2LyYjEuOm
TLSH
T1A0F5AF21B2D18120E1B39370297EA7EA5779BC356F76408F32DCB6390B725C09D75B2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-12_b49dfde9601ea7a67f10619c7b36f86a_amadey_darkgate_elex_luca-stealer_lynx_njrat

File Explorer

2026-10-12_b49dfde9601ea7a67f10619c7b36f86a_amadey_darkgate_elex_luca-stealer_lynx_njrat

.exe 3.3MB

2026-10-12_b49dfde9601ea7a67f10619c7b36f86a_amadey_darkgate_elex_luca-stealer_lynx_njrat

IMPHASH 362dc034678576de221f648ab65b8991
SHA256 7e6e8f3479badea9909d61b9950ac0c5aa7ea2cc733e2713f2e8271e93071083
MD5 b49dfde9601ea7a67f10619c7b36f86a
SHA1 7376ca78def645b9c270f644330a7441b0c12f39
SHA512 7fb8d7de4413a1855309197691e1fa8aa9c897e67959c4ca867c26c4ec66230068fc52a86c95379f0ab2fb63f314590c86933ee441d49df1cf0bf1a910c1a969
SSDEEP 49152:ic5nqEHAWV21v8Uo4wAeyfvE0Z3R0vnxn1o2d5jZzu377sbZjEuLqm:i8qEHAWVpAeKtEnW2LyYjEuOm
TLSH
T1A0F5AF21B2D18120E1B39370297EA7EA5779BC356F76408F32DCB6390B725C09D75B2A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

628884

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Jenkins\workspace\MBAM-Windows\A_MB5_MBSetup\bin\Win32\Release\MBSetup.pdb

kernel32

MulDiv HeapDestroy HeapSize HeapReAlloc HeapFree HeapAlloc GetProcessHeap FreeLibrary GetProcAddress GetModuleHandleW lstrcmpiW LeaveCriticalSection EnterCriticalSection GetLastError MultiByteToWideChar SizeofResource LoadResource FindResourceW LoadLibraryExW GetModuleFileNameW InitializeCriticalSectionEx DeleteCriticalSection RaiseException LockResource FindResourceExW WideCharToMultiByte IsWow64Process GetCurrentProcess VerifyVersionInfoW VerSetConditionMask GetSystemDirectoryW CreateFileW DeviceIoControl CloseHandle GetCurrentThreadId CreateEventW SetLastError Sleep DeleteFileW GlobalFree WaitForSingleObject LocalFree FormatMessageW LocalAlloc CallNamedPipeW GetWindowsDirectoryW SetCurrentDirectoryW SetDefaultDllDirectories GetCommandLineW DecodePointer CreateMutexW GetNativeSystemInfo GetDiskFreeSpaceExW FindFirstFileW FindClose CreateProcessW FindNextFileW GlobalAlloc GlobalLock SetThreadUILanguage LoadLibraryW CreateDirectoryW GetLogicalDrives GetTempPathW MoveFileExW InitializeProcThreadAttributeList UpdateProcThreadAttribute DeleteProcThreadAttributeList OpenProcess ResumeThread TerminateProcess GetCurrentProcessId GetModuleFileNameA ProcessIdToSessionId CreateToolhelp32Snapshot Process32FirstW Process32NextW GetLogicalDriveStringsW QueryDosDeviceW OutputDebugStringW GetLocalTime GetExitCodeProcess GetFileSizeEx GetFileAttributesW WriteConsoleW GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA FormatMessageA GetStringTypeW GetLocaleInfoEx FindFirstFileExW GetFileAttributesExW GetFileInformationByHandle SetFileInformationByHandle AreFileApisANSI CopyFileW GetFileInformationByHandleEx QueryPerformanceCounter QueryPerformanceFrequency ReleaseSRWLockExclusive AcquireSRWLockExclusive EncodePointer LCMapStringEx WakeAllConditionVariable SleepConditionVariableSRW GetSystemTimeAsFileTime GetCPInfo IsDebuggerPresent InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent VirtualAlloc VirtualFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW CreateThread ExitThread FreeLibraryAndExitThread GetCommandLineA GetStdHandle WriteFile GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx ReadFile GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadConsoleW GetTimeZoneInformation IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle SetEndOfFile

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-12_b49dfde9601ea7a67f10619c7b36f86a_amadey_darkgate_elex_luca-stealer_lynx_njrat

kernel32

generic