General
- Target 2026-07-01_d3091c81128cb1e87c1cfa6148850f7e_akira_amadey_darkgate_elex_floxif_luca-stealer_njrat
- Size 2.8MB
- Sample260701-jdf2nsbs5w
- SHA256 e82c25b22fad9f13c8732a7605f54a0608f134125c95e41390b6330cc0578280
- MD5 d3091c81128cb1e87c1cfa6148850f7e
- SHA1 b3f67fa5016002b326d55b9deb991910f7e45328
- SHA512 6666f96923401a32e1b144c91883765d9b6ed72db09cdcd23cdbec5516c0c02b44a2ec76bd2d0ab6713aa2749d1c51a0903b7031b9713b481fa3a507a655cd2d
- SSDEEP 49152:68Gn2SjT1tasnhMdcW4/nbuKufiDaVbKRGqpso9A5hEGX8FUYVkv354kwz9k:68G2SjCsqdcWS02RGiuo+5fwy
- TLSH T140D59E2F7649C57AE2131D395D88EA54E2B4F860CF6288C373C85B5F2A747C35E325A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_d3091c81128cb1e87c1cfa6148850f7e_akira_amadey_darkgate_elex_floxif_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_d3091c81128cb1e87c1cfa6148850f7e_akira_amadey_darkgate_elex_floxif_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_d3091c81128cb1e87c1cfa6148850f7e_akira_amadey_darkgate_elex_floxif_luca-stealer_njrat
- Size 2.8MB
- SHA256 e82c25b22fad9f13c8732a7605f54a0608f134125c95e41390b6330cc0578280
- MD5 d3091c81128cb1e87c1cfa6148850f7e
- SHA1 b3f67fa5016002b326d55b9deb991910f7e45328
- SHA512 6666f96923401a32e1b144c91883765d9b6ed72db09cdcd23cdbec5516c0c02b44a2ec76bd2d0ab6713aa2749d1c51a0903b7031b9713b481fa3a507a655cd2d
- SSDEEP 49152:68Gn2SjT1tasnhMdcW4/nbuKufiDaVbKRGqpso9A5hEGX8FUYVkv354kwz9k:68G2SjCsqdcWS02RGiuo+5fwy
- TLSH T140D59E2F7649C57AE2131D395D88EA54E2B4F860CF6288C373C85B5F2A747C35E325A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.