2026-10-28_59d86d2a5ab19688fb04b53ef429a23f_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-28_59d86d2a5ab19688fb04b53ef429a23f_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader
Size 1.2MB
Sample261030-ejgg6sav5j
SHA256 e0f52ebbf2e9ad9042fb8a8593ec9406efc4e506a37d89abdfae1aabc7e3ad53
MD5 59d86d2a5ab19688fb04b53ef429a23f
SHA1 448cafe6d37d751f56aad30db1ec56d7fc738937
SHA512 08ed06200d83bab340fa85d890080deeb8f67a18be25949d7146d1048e2d35e761be08905e96c9efd613d6415466c7f8e24558c5c65a32c60cebe1f8d460975b
SSDEEP 24576:uWHInXlYB8LISmmcOxqwozg7uvuw5Rs9epoOGfCFLNbe0kJP2JPF0ZMJ:anC8VmMxF6CgVEik4JPF0ZMJ
TLSH
T11B459E42FB8391B1F6CA00B5106B6BB7DD362521872598D3E7C01DB589252D27B3FB8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-28_59d86d2a5ab19688fb04b53ef429a23f_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader

File Explorer

2026-10-28_59d86d2a5ab19688fb04b53ef429a23f_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader

.exe 1.2MB

2026-10-28_59d86d2a5ab19688fb04b53ef429a23f_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader

IMPHASH 9f955c62d6009942fcf7a28b1b8aae75
SHA256 e0f52ebbf2e9ad9042fb8a8593ec9406efc4e506a37d89abdfae1aabc7e3ad53
MD5 59d86d2a5ab19688fb04b53ef429a23f
SHA1 448cafe6d37d751f56aad30db1ec56d7fc738937
SHA512 08ed06200d83bab340fa85d890080deeb8f67a18be25949d7146d1048e2d35e761be08905e96c9efd613d6415466c7f8e24558c5c65a32c60cebe1f8d460975b
SSDEEP 24576:uWHInXlYB8LISmmcOxqwozg7uvuw5Rs9epoOGfCFLNbe0kJP2JPF0ZMJ:anC8VmMxF6CgVEik4JPF0ZMJ
TLSH
T11B459E42FB8391B1F6CA00B5106B6BB7DD362521872598D3E7C01DB589252D27B3FB8E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

940832

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

winhttp

WinHttpCloseHandle WinHttpConnect WinHttpReadData WinHttpQueryDataAvailable WinHttpOpenRequest WinHttpAddRequestHeaders WinHttpSendRequest WinHttpReceiveResponse WinHttpQueryHeaders WinHttpOpen

bcrypt

BCryptCloseAlgorithmProvider BCryptOpenAlgorithmProvider BCryptDecrypt BCryptDestroyKey BCryptGenerateSymmetricKey BCryptSetProperty

crypt32

CryptUnprotectData CryptStringToBinaryA

comctl32

ord17

user32

GetMessageA LoadIconA LoadCursorA MessageBoxA GetWindowRect GetClientRect UpdateWindow EnableWindow KillTimer SetTimer MoveWindow ShowWindow DestroyWindow CreateWindowExA RegisterClassExA PostQuitMessage DefWindowProcA SendMessageA DispatchMessageA TranslateMessage

gdi32

CreateFontA

kernel32

GetOEMCP GetACP IsValidCodePage GetTimeZoneInformation ReadConsoleW SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP GetFileType GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW LoadLibraryExW VirtualProtect UnhandledExceptionFilter IsDebuggerPresent GetStdHandle GetModuleFileNameW TerminateProcess ExitProcess GetCurrentProcess GetModuleHandleExW FreeLibraryAndExitThread GetCommandLineA GetFullPathNameW GetEnvironmentVariableA GetTempPathA CloseHandle GetCurrentProcessId GetLocalTime LocalFree CreateToolhelp32Snapshot Process32First Process32Next FlushFileBuffers GetTickCount QueryPerformanceCounter MapViewOfFile CreateFileMappingW FormatMessageA GetSystemTime GetSystemTimeAsFileTime WideCharToMultiByte FreeLibrary SystemTimeToFileTime GetProcessHeap GetFileSize LockFileEx GetProcAddress UnlockFile HeapDestroy HeapCompact HeapAlloc LoadLibraryW GetSystemInfo HeapReAlloc DeleteFileW DeleteFileA WaitForSingleObjectEx LoadLibraryA CreateFileA FlushViewOfFile OutputDebugStringW GetFileAttributesExW GetFileAttributesA GetLastError GetDiskFreeSpaceA FormatMessageW Sleep MultiByteToWideChar HeapSize HeapValidate UnmapViewOfFile GetFileAttributesW CreateFileW WaitForSingleObject CreateMutexW GetTempPathW UnlockFileEx SetEndOfFile GetFullPathNameA SetFilePointer LockFile OutputDebugStringA GetDiskFreeSpaceW WriteFile WriteConsoleW HeapFree HeapCreate ReadFile AreFileApisANSI RaiseException InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection GetCurrentThreadId QueryPerformanceFrequency GetSystemTimePreciseAsFileTime GetLocaleInfoEx FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileInformationByHandle SetFileInformationByHandle CreateFile2 GetModuleHandleW CopyFile2 GetFileInformationByHandleEx InitializeCriticalSectionEx ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable EncodePointer DecodePointer CompareStringEx GetCPInfo LCMapStringEx GetStringTypeW IsProcessorFeaturePresent SetUnhandledExceptionFilter GetStartupInfoW InitializeSListHead RtlUnwind SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree CreateThread ExitThread

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-28_59d86d2a5ab19688fb04b53ef429a23f_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader

winhttp

bcrypt

crypt32

comctl32

user32

gdi32

kernel32

generic