2026-10-16_f73094fed712417ed7d62e572768a4e3_amadey_darkgate_elex_luca-stealer_lynx_manuscrypt_medusalocker_njrat_remcos_smoke-loader

General

Target
2026-10-16_f73094fed712417ed7d62e572768a4e3_amadey_darkgate_elex_luca-stealer_lynx_manuscrypt_medusalocker_njrat_remcos_smoke-loader
Size 20.0MB
Sample261017-cnmtmscf77
SHA256 dda7e36cdb00ff0e8de940b6a96eb71879270db1253d9e5dbae78be954930bd4
MD5 f73094fed712417ed7d62e572768a4e3
SHA1 2b64fda96c4ea2c15a2988bc255e5017e7fd09d6
SHA512 cc0c2fbffad3cff17d5a62afcfcd66204d80d72a1e7d9e75bf97a9d1fc7885af3de4e440150577d89298dfaaa128e7285b9cce9c9b8a79b9328e039187592153
SSDEEP 393216:hjpjjSsfZ47C6dOEPTlDQ49Zl1z0gPo3kS9PaCh5jXEyjtXayPPzu+lXD+Xf3J:Npj+sfeddOE5Dz91ze3v1Xh5VZamztKx
TLSH
T1D52733253A91E036D63305310D68E76E50BDB9700B76995BB3C8261E2E708D3AF3776B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-16_f73094fed712417ed7d62e572768a4e3_amadey_darkgate_elex_luca-stealer_lynx_manuscrypt_medusalocker_njrat_remcos_smoke-loader

File Explorer

2026-10-16_f73094fed712417ed7d62e572768a4e3_amadey_darkgate_elex_luca-stealer_lynx_manuscrypt_medusalocker_njrat_remcos_smoke-loader

.exe 20.0MB

2026-10-16_f73094fed712417ed7d62e572768a4e3_amadey_darkgate_elex_luca-stealer_lynx_manuscrypt_medusalocker_njrat_remcos_smoke-loader

IMPHASH f62310869deec1279b63ba622e66eece
SHA256 dda7e36cdb00ff0e8de940b6a96eb71879270db1253d9e5dbae78be954930bd4
MD5 f73094fed712417ed7d62e572768a4e3
SHA1 2b64fda96c4ea2c15a2988bc255e5017e7fd09d6
SHA512 cc0c2fbffad3cff17d5a62afcfcd66204d80d72a1e7d9e75bf97a9d1fc7885af3de4e440150577d89298dfaaa128e7285b9cce9c9b8a79b9328e039187592153
SSDEEP 393216:hjpjjSsfZ47C6dOEPTlDQ49Zl1z0gPo3kS9PaCh5jXEyjtXayPPzu+lXD+Xf3J:Npj+sfeddOE5Dz91ze3v1Xh5VZamztKx
TLSH
T1D52733253A91E036D63305310D68E76E50BDB9700B76995BB3C8261E2E708D3AF3776B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

396302

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\project\se\branches\10.0.2_Diana\src\SEInstaller\Bin\Release\SEInstaller.pdb

kernel32

GetCommandLineW GetModuleHandleW LoadResource SizeofResource FindResourceW GetFullPathNameW GlobalUnlock GlobalLock GlobalAlloc UnmapViewOfFile GetWindowsDirectoryA IsWow64Process GlobalMemoryStatusEx FileTimeToDosDateTime FileTimeToLocalFileTime GetProcessTimes InterlockedCompareExchange GetEnvironmentVariableW MapViewOfFile OpenFileMappingW GetProcessHeap HeapDestroy DecodePointer HeapAlloc HeapReAlloc HeapSize HeapFree CreateThread WaitForMultipleObjects RaiseException SetLastError LeaveCriticalSection EnterCriticalSection GetCurrentThreadId InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetTempPathW GetDriveTypeW GetFileSize FindFirstFileW Sleep GetCurrentProcessId OpenEventW WaitForSingleObject SetFilePointer FreeLibrary GetProcAddress LockResource GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA GetVersionExW GetCurrentProcess OpenProcess GetTickCount CreateFileMappingW QueryPerformanceCounter InterlockedIncrement ReadProcessMemory GetSystemDirectoryW GetSystemDirectoryA CreateFileW GetFileTime FindClose CreateDirectoryW FindNextFileW GetShortPathNameW GetTempFileNameW MoveFileW MoveFileExW RemoveDirectoryW ReadFile GetFileAttributesW WriteFile GetDiskFreeSpaceExW LoadLibraryExW WideCharToMultiByte MulDiv VirtualAlloc LoadLibraryA VirtualFree LoadLibraryW GlobalFree InitializeCriticalSection InterlockedExchange LocalAlloc LocalFree DeviceIoControl CopyFileA CreateFileA QueryPerformanceFrequency OutputDebugStringW SearchPathW GlobalSize DebugBreak lstrlenW CreateToolhelp32Snapshot Process32FirstW Process32NextW GetFileSizeEx GetStdHandle GetConsoleScreenBufferInfo SetConsoleTextAttribute CreateProcessW GetExitCodeProcess GetProcessId TerminateProcess CopyFileW CreateMutexA CreateMutexW GetDiskFreeSpaceW GetLocalTime FindResourceExW FindFirstFileExW SetFilePointerEx SetEndOfFile SetFileAttributesW OutputDebugStringA GetSystemTimeAsFileTime SetUnhandledExceptionFilter EncodePointer InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent IsDebuggerPresent DuplicateHandle WaitForSingleObjectEx SwitchToThread GetCurrentThread GetExitCodeThread GetNativeSystemInfo TryEnterCriticalSection GetStringTypeW TlsAlloc TlsGetValue TlsSetValue TlsFree CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo UnhandledExceptionFilter GetStartupInfoW RtlUnwind InterlockedFlushSList ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetFileType GetConsoleMode ReadConsoleW GetTimeZoneInformation IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleCP IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle WriteConsoleW CreateTimerQueue SignalObjectAndWait SetThreadPriority GetThreadPriority CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait GetThreadTimes GetModuleHandleA ReleaseSemaphore QueryDepthSList UnregisterWaitEx ExpandEnvironmentStringsW DeleteFileW GetLastError CloseHandle SetEvent CreateEventW MultiByteToWideChar GetModuleFileNameW

user32

IsCharAlphaNumericW IsWindow PeekMessageW GetCursorPos WindowFromPoint ScreenToClient IsWindowVisible GetKeyState ClientToScreen IntersectRect KillTimer EqualRect SetTimer SetCursor GetSysColor SetRect FillRect CreateCaret HideCaret SetCaretPos GetCaretBlinkTime IsClipboardFormatAvailable OpenClipboard GetClipboardData CloseClipboard TrackPopupMenuEx InsertMenuW CreatePopupMenu DestroyMenu GetFocus GetForegroundWindow SetFocus SetCapture ReleaseCapture TrackMouseEvent InvalidateRect RedrawWindow GetCapture SetRectEmpty UpdateLayeredWindow PtInRect UnionRect MonitorFromWindow GetSystemMetrics DrawEdge PostThreadMessageW ShowWindow LoadStringW GetWindowThreadProcessId AllowSetForegroundWindow OffsetRect GetMonitorInfoW GetClassNameW ReleaseDC GetDC InflateRect DestroyIcon DrawIcon EndDialog GetWindow SystemParametersInfoW GetWindowRect GetParent MapWindowPoints EndPaint BeginPaint MessageBoxW SetWindowPos SetClassLongW GetClassLongW PostQuitMessage LoadIconW GetLayeredWindowAttributes SetWindowRgn SetLayeredWindowAttributes CopyRect GetClientRect SetPropW SetWindowTextW IsRectEmpty SendMessageW CreateWindowExW LoadCursorW GetClassInfoExW RegisterClassExW DispatchMessageW TranslateMessage GetMessageW UnregisterClassW CallWindowProcW DrawTextW DrawFocusRect IsWindowEnabled GetWindowTextW EnumWindows EnumChildWindows DefWindowProcW SetWindowLongW DestroyWindow RegisterWindowMessageW GetWindowLongW PostMessageW FindWindowW GetDesktopWindow

gdi32

GetBkMode GetDeviceCaps GetTextMetricsW RestoreDC SaveDC CreateCompatibleDC CreateCompatibleBitmap SelectObject GetClipBox CreateEllipticRgn DeleteObject ExtTextOutW SetBkColor DeleteDC CreateDIBSection GetDIBits GetObjectW GdiFlush BitBlt StretchBlt CreateRectRgnIndirect ExtSelectClipRgn GetStockObject CreateFontIndirectW SetBkMode SetTextColor GetViewportOrgEx SetViewportOrgEx SelectClipRgn GetClipRgn CreateRectRgn GetTextExtentExPointW GetTextExtentPoint32W GetTextColor CreateFontW GetCurrentObject

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-16_f73094fed712417ed7d62e572768a4e3_amadey_darkgate_elex_luca-stealer_lynx_manuscrypt_medusalocker_njrat_remcos_smoke-loader

kernel32

user32

gdi32

generic