2026-11-01_eb3c27d38109051d7ed8931f581e1306_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-01_eb3c27d38109051d7ed8931f581e1306_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader
Size 6.6MB
Sample261102-e15akasw2l
SHA256 5fceaf248653ea40804c04b1cfcd363a948fd6676b7645e5176999ef526e9fb1
MD5 eb3c27d38109051d7ed8931f581e1306
SHA1 267487eeba2f33f9c76c7e69e5a76596735cf64c
SHA512 54859a932c5a6e34121c4645149ff5de7efbff0af527564c43a5973144becbbb333672234c16c3461f3e61f4b3b6d2dc51b0e3ce140cff20b4113c851be2b340
SSDEEP 98304:QSv0WRdhke/BPwAimPMt9yxHr2DJbVZwQooXFoeYFVXhF5y9DMbJcioxcKK2SewE:pRdh9PwAimPM3y4DJbVZwgX017G
TLSH
T13866AF21B901C122EA8511F2967CAFBB466C45354B6A10C372CC5FAEAB755E33B31F27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_eb3c27d38109051d7ed8931f581e1306_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader

File Explorer

2026-11-01_eb3c27d38109051d7ed8931f581e1306_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader

.exe 6.6MB

2026-11-01_eb3c27d38109051d7ed8931f581e1306_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader

IMPHASH 004da78c837e00e309a82e25bf253dc0
SHA256 5fceaf248653ea40804c04b1cfcd363a948fd6676b7645e5176999ef526e9fb1
MD5 eb3c27d38109051d7ed8931f581e1306
SHA1 267487eeba2f33f9c76c7e69e5a76596735cf64c
SHA512 54859a932c5a6e34121c4645149ff5de7efbff0af527564c43a5973144becbbb333672234c16c3461f3e61f4b3b6d2dc51b0e3ce140cff20b4113c851be2b340
SSDEEP 98304:QSv0WRdhke/BPwAimPMt9yxHr2DJbVZwQooXFoeYFVXhF5y9DMbJcioxcKK2SewE:pRdh9PwAimPM3y4DJbVZwgX017G
TLSH
T13866AF21B901C122EA8511F2967CAFBB466C45354B6A10C372CC5FAEAB755E33B31F27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6546

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\dev\MaxyClaude\bin\Release-Win32\MaxyClaude.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

kernel32

WaitForSingleObject TerminateProcess CreateProcessW GetProcessId ReadFile ConnectNamedPipe DisconnectNamedPipe CreateNamedPipeW GetOverlappedResult CancelIoEx SetEvent ResetEvent CreateEventW WaitForMultipleObjects FindClose FindFirstFileW FindNextFileW PeekNamedPipe GetLocalTime AllocConsole FreeConsole WriteConsoleA SetConsoleOutputCP SetConsoleTextAttribute SetConsoleTitleW GetConsoleWindow GetModuleFileNameW GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte VirtualQuery GetModuleHandleW GetCurrentProcessId VirtualFree CopyFileW MoveFileExW ReleaseMutex CreateMutexW OutputDebugStringA GlobalAlloc GlobalUnlock GlobalLock GlobalFree VerSetConditionMask QueryPerformanceCounter QueryPerformanceFrequency FreeLibrary GetModuleHandleA GetProcAddress LoadLibraryA GetLocaleInfoA IsDBCSLeadByte AcquireSRWLockShared HeapQueryInformation HeapSize SetStdHandle OutputDebugStringW GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetLastError GetOEMCP GetACP IsValidCodePage SetConsoleCtrlHandler HeapReAlloc GetTimeZoneInformation ReadConsoleW SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW LoadLibraryExW VirtualProtect IsThreadAFiber GetFileType HeapAlloc HeapFree GetCurrentThread UnhandledExceptionFilter IsDebuggerPresent GetStdHandle ExitProcess GetCurrentProcess FreeLibraryAndExitThread ResumeThread ExitThread CreateThread FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError InterlockedFlushSList InterlockedPushEntrySList RtlUnwind RaiseException InitializeSListHead GetSystemTimeAsFileTime GetStartupInfoW SetUnhandledExceptionFilter IsProcessorFeaturePresent GetCPInfo CompareStringEx LocalFree Sleep CloseHandle WriteFile ReleaseSRWLockShared TryAcquireSRWLockExclusive AcquireSRWLockExclusive LCMapStringEx WakeAllConditionVariable WakeConditionVariable DecodePointer EncodePointer DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection CreateFileW GetCommandLineW WriteConsoleW GetCommandLineA SetEndOfFile EnterCriticalSection GetStringTypeW GetTickCount64 SleepConditionVariableSRW FormatMessageA GetLocaleInfoEx SetCurrentDirectoryW GetCurrentDirectoryW CreateDirectoryW FindFirstFileExW GetDiskFreeSpaceExW GetFileAttributesW GetFileAttributesExW GetFileInformationByHandle GetFinalPathNameByHandleW GetFullPathNameW SetFileAttributesW SetFileInformationByHandle SetFileTime GetTempPathW CreateFile2 AreFileApisANSI DeviceIoControl CreateDirectoryExW CopyFile2 CreateHardLinkW GetFileInformationByHandleEx CreateSymbolicLinkW GetSystemTimePreciseAsFileTime WaitForSingleObjectEx SwitchToThread GetCurrentThreadId GetExitCodeThread GetLogicalProcessorInformationEx ReleaseSRWLockExclusive TryAcquireSRWLockShared

user32

TranslateMessage DispatchMessageW PeekMessageW ShowWindow IsIconic DefWindowProcW PostQuitMessage UnregisterClassW RegisterClassExW CreateWindowExW SetFocus UpdateWindow SetProcessDPIAware EnumDisplayMonitors GetMonitorInfoW MonitorFromWindow SetWindowLongW GetWindowLongW WindowFromPoint ScreenToClient ClientToScreen GetCursorPos SetCursor SetCursorPos AdjustWindowRectEx GetClientRect GetPropA SetPropA ReleaseDC GetDC GetForegroundWindow IsWindowUnicode ReleaseCapture SetCapture GetCapture GetKeyState MessageBoxW BringWindowToTop SetWindowPos SetLayeredWindowAttributes IsChild GetMessageExtraInfo TrackMouseEvent GetKeyboardLayout EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard DeleteMenu GetSystemMenu GetWindow GetWindowThreadProcessId EnumWindows GetWindowRect SetForegroundWindow GetActiveWindow IsWindowVisible LoadCursorW DestroyWindow

gdi32

GetDeviceCaps CreateRectRgn DeleteObject

shell32

CommandLineToArgvW ShellExecuteExW ShellExecuteW

ole32

CoTaskMemFree CoCreateInstance CoInitializeEx CoUninitialize

winmm

timeGetTime

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

dwmapi

DwmIsCompositionEnabled DwmGetColorizationColor DwmEnableBlurBehindWindow

Name

.text

Size

5.2MB

Virtual Size

5.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

72KB

Virtual Size

112KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

1024B

Virtual Size

777B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

270B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

409B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

148KB

Virtual Size

147KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_eb3c27d38109051d7ed8931f581e1306_amadey_darkgate_elex_luca-stealer_njrat_smoke-loader

d3d11

d3dcompiler_47

kernel32

user32

gdi32

shell32

ole32

winmm

imm32

dwmapi

generic