General
- Target 2026-06-27_50bbd149085cbd08dee6a7129803bc4d_akira_amadey_darkgate_elex_floxif_luca-stealer_njrat
- Size 2.8MB
- Sample260629-jasajaf17x
- SHA256 940d562427731de1f8cb484d9a34dfc7dda82449eaebc5304909b0d21c18b25e
- MD5 50bbd149085cbd08dee6a7129803bc4d
- SHA1 2530f4cf3406459bd9f3de9c21caf45481607ef3
- SHA512 1699cc72c4a64d6d65dbaf5e0cd601398b0cd6de0462967af8b0e95d4b3f34dd5d98ce73374a8f0acc8cfe7abe062ff8ab71fea581fa6a0d189d489b54a077b7
- SSDEEP 49152:303knOnaEFcje4KE3xDScxJ7Vro6SXkTXzQcd41EErbkSwwhIGXnF1YVkv354Drd:303kOnadBNBDScxleEaPk+5+R
- TLSH T156D58E2E72C5C5BBE2131D796D88E694E274F830CF6248D773844B4E2A717D35E326A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_50bbd149085cbd08dee6a7129803bc4d_akira_amadey_darkgate_elex_floxif_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_50bbd149085cbd08dee6a7129803bc4d_akira_amadey_darkgate_elex_floxif_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260618-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_50bbd149085cbd08dee6a7129803bc4d_akira_amadey_darkgate_elex_floxif_luca-stealer_njrat
- Size 2.8MB
- SHA256 940d562427731de1f8cb484d9a34dfc7dda82449eaebc5304909b0d21c18b25e
- MD5 50bbd149085cbd08dee6a7129803bc4d
- SHA1 2530f4cf3406459bd9f3de9c21caf45481607ef3
- SHA512 1699cc72c4a64d6d65dbaf5e0cd601398b0cd6de0462967af8b0e95d4b3f34dd5d98ce73374a8f0acc8cfe7abe062ff8ab71fea581fa6a0d189d489b54a077b7
- SSDEEP 49152:303knOnaEFcje4KE3xDScxJ7Vro6SXkTXzQcd41EErbkSwwhIGXnF1YVkv354Drd:303kOnadBNBDScxleEaPk+5+R
- TLSH T156D58E2E72C5C5BBE2131D796D88E694E274F830CF6248D773844B4E2A717D35E326A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.