General

  • Target
    2026-11-03_3b02971654c22f99332e61281dde374e_amadey_darkgate_elex_luca-stealer_lynx_njrat
  • Size 1.8MB
  • Sample261104-3cvcfsd18v
  • SHA256 87c02ac487d47abdac0d92e2a028aaf6d09e5015e64e0230c09a6db7272245a0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2026-11-03_3b02971654c22f99332e61281dde374e_amadey_darkgate_elex_luca-stealer_lynx_njrat
    .exe 1.8MB

2026-11-03_3b02971654c22f99332e61281dde374e_amadey_darkgate_elex_luca-stealer_lynx_njrat

  • IMPHASH a8c8c8dbce56c98b4274726d36250d4f
  • SHA256 87c02ac487d47abdac0d92e2a028aaf6d09e5015e64e0230c09a6db7272245a0
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
1
Major OS version
5
Entry point
918960
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\Jenkins\workspace\ccd-hyperdrive\main\native\win32\build\msvs_win32_x86\Release\x86\sym\HDBoxCustomHook\HDBoxCustomHook\HDCoreCustomHook.pdb