General
- Target 2026-07-03_08f77bab5929d3305dd36f9cfb7bcc31_akira_amadey_darkgate_elex_floxif_luca-stealer_njrat
- Size 2.8MB
- Sample260703-ryz92sa16v
- SHA256 57371548be35cf7be158e6991b9ad93bfd4452976a5da081706e3e1c17491032
- MD5 08f77bab5929d3305dd36f9cfb7bcc31
- SHA1 ecfa662979ef0c750b39ffa76c6e55e15d269bd6
- SHA512 19be254f9d7cd876a022441848c59d918a49fa0479b51816be651130614249c557ba6c38febe1d17557d5b98cd36db480620182815aaf7245190742f758e130f
- SSDEEP 49152:303knOnaEKcje5E3xDScxJ7Vro6SXkTXzQcY41EErbkSwwhIGXnF1YVkv354DrWg:303kOnawLBDScxQeEaPk+5+l
- TLSH T1CBD58D2E72C5C5BBE2131D396D88E694E274F830CF6248D773844B4E2A717D35E326A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_08f77bab5929d3305dd36f9cfb7bcc31_akira_amadey_darkgate_elex_floxif_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_08f77bab5929d3305dd36f9cfb7bcc31_akira_amadey_darkgate_elex_floxif_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_08f77bab5929d3305dd36f9cfb7bcc31_akira_amadey_darkgate_elex_floxif_luca-stealer_njrat
- Size 2.8MB
- SHA256 57371548be35cf7be158e6991b9ad93bfd4452976a5da081706e3e1c17491032
- MD5 08f77bab5929d3305dd36f9cfb7bcc31
- SHA1 ecfa662979ef0c750b39ffa76c6e55e15d269bd6
- SHA512 19be254f9d7cd876a022441848c59d918a49fa0479b51816be651130614249c557ba6c38febe1d17557d5b98cd36db480620182815aaf7245190742f758e130f
- SSDEEP 49152:303knOnaEKcje5E3xDScxJ7Vro6SXkTXzQcY41EErbkSwwhIGXnF1YVkv354DrWg:303kOnawLBDScxQeEaPk+5+l
- TLSH T1CBD58D2E72C5C5BBE2131D396D88E694E274F830CF6248D773844B4E2A717D35E326A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.