General
- Target 2026-05-29_7793fe0774b1a1fb11e61ded73c7592f_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 2.0MB
- Sample260529-bmdc5sfx7x
- SHA256 5b7f6a285ff250a8a66f8ba5810ad88dc89edcb8f76ef1f9d33f4ad21c1c962a
- MD5 7793fe0774b1a1fb11e61ded73c7592f
- SHA1 ae64039380d51f56679268faa51e692c7a97d530
- SHA512 7787ccdcea607943dc3e48d7dbd3dcfd2d19bd24e72bab62e46cc4d0788b284e430c2acd40c496df39ee48bd0cf9fee8f45e1a0566df7f27828df1529cd20909
- SSDEEP 49152:83cbOgvxzNFUqxAhYyYDjGfoBbEQk+03wzqgCNLuLE:13y
- TLSH T150A53D1177F94B59F9F34EB86ABAA616083ABC69CF11C6DF1250518E0C31AD08971F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-29_7793fe0774b1a1fb11e61ded73c7592f_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-29_7793fe0774b1a1fb11e61ded73c7592f_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_7793fe0774b1a1fb11e61ded73c7592f_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 2.0MB
- SHA256 5b7f6a285ff250a8a66f8ba5810ad88dc89edcb8f76ef1f9d33f4ad21c1c962a
- MD5 7793fe0774b1a1fb11e61ded73c7592f
- SHA1 ae64039380d51f56679268faa51e692c7a97d530
- SHA512 7787ccdcea607943dc3e48d7dbd3dcfd2d19bd24e72bab62e46cc4d0788b284e430c2acd40c496df39ee48bd0cf9fee8f45e1a0566df7f27828df1529cd20909
- SSDEEP 49152:83cbOgvxzNFUqxAhYyYDjGfoBbEQk+03wzqgCNLuLE:13y
- TLSH T150A53D1177F94B59F9F34EB86ABAA616083ABC69CF11C6DF1250518E0C31AD08971F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.