General

  • Target
    2026-10-18_8c999ce2d91e1001c7e7282273f75c7a_amadey_darkgate_elex_luca-stealer_lynx_njrat
  • Size 1.8MB
  • Sample261018-nrdwpayvbv
  • SHA256 21600e8542230081e34d2da49d174f577d47e6f5d4088b3be4508c10d642f4fb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Detects executables built or packed with MPress PE compressor 1 IoCs

File Explorer

  • 2026-10-18_8c999ce2d91e1001c7e7282273f75c7a_amadey_darkgate_elex_luca-stealer_lynx_njrat
    .exe 1.8MB

2026-10-18_8c999ce2d91e1001c7e7282273f75c7a_amadey_darkgate_elex_luca-stealer_lynx_njrat

  • IMPHASH aed13cffa9290e540355e6e087d6dd7c
  • SHA256 21600e8542230081e34d2da49d174f577d47e6f5d4088b3be4508c10d642f4fb
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects executables built or packed with MPress PE compressor

Digest
74:07:52:3e:97:8f:69:a0:88:d9:0a:7a:29:6b:32:a1:24:d5:2e:bc:09:63:20:3f:34:c4:e7:02:5f:00:2f:f0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Malwarebytes Inc,O=Malwarebytes Inc,L=Santa Clara,ST=California,C=US
Digest
74:07:52:3e:97:8f:69:a0:88:d9:0a:7a:29:6b:32:a1:24:d5:2e:bc:09:63:20:3f:34:c4:e7:02:5f:00:2f:f0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=5430750,CN=Malwarebytes Inc,O=Malwarebytes Inc,L=Santa Clara,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Minor OS version
0
Major OS version
6
Entry point
869852
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths