General
- Target 2026-05-29_04d3093842e2e34fbac60fb88b42cffb_amadey_darkgate_elex_luca-stealer_magniber_njrat
- Size 4.4MB
- Sample260529-rt2bjsdt5x
- SHA256 d20646bb55aab101be4e96ff5ed66034b56b6e9be20bcdf3a940eca8fdd086b0
- MD5 04d3093842e2e34fbac60fb88b42cffb
- SHA1 2b26a55796e2251edd4e37a1a2f491b63cf6c514
- SHA512 56a82ac22db5371973c4f4caa4092c000430aecd23172bd1730f170c95726c25cf64fa2f3637e1a0af6bb7dda2d9d82bcd3eb1b5ecdc9ee926062df52df186c9
- SSDEEP 98304:8guneKaJ6HtjE9gzPhLQRWt1WZCmMbg5AANGgUoqxvS:8gUayzMMbg5AANSo46
- TLSH T1CD267C633AE1762EC512A2304D3BF77DB2EEAB700A3541D773DC6F1A1BB11416A14A27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-29_04d3093842e2e34fbac60fb88b42cffb_amadey_darkgate_elex_luca-stealer_magniber_njrat.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-29_04d3093842e2e34fbac60fb88b42cffb_amadey_darkgate_elex_luca-stealer_magniber_njrat.exe
Resource
win11-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_04d3093842e2e34fbac60fb88b42cffb_amadey_darkgate_elex_luca-stealer_magniber_njrat
- Size 4.4MB
- SHA256 d20646bb55aab101be4e96ff5ed66034b56b6e9be20bcdf3a940eca8fdd086b0
- MD5 04d3093842e2e34fbac60fb88b42cffb
- SHA1 2b26a55796e2251edd4e37a1a2f491b63cf6c514
- SHA512 56a82ac22db5371973c4f4caa4092c000430aecd23172bd1730f170c95726c25cf64fa2f3637e1a0af6bb7dda2d9d82bcd3eb1b5ecdc9ee926062df52df186c9
- SSDEEP 98304:8guneKaJ6HtjE9gzPhLQRWt1WZCmMbg5AANGgUoqxvS:8gUayzMMbg5AANSo46
- TLSH T1CD267C633AE1762EC512A2304D3BF77DB2EEAB700A3541D773DC6F1A1BB11416A14A27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1