General
- Target 2026-07-04_8af0473e8225983cb1127e2ca8ed9db9_akira_amadey_darkgate_elex_floxif_luca-stealer_njrat
- Size 2.8MB
- Sample260704-chntraat2t
- SHA256 8eadf2bb974d9e80866397e804041f952a43743eda4df92ecfdc2bea78e3e336
- MD5 8af0473e8225983cb1127e2ca8ed9db9
- SHA1 7b092ad067258827ea41f2c1384206a6e04ae60c
- SHA512 241f88e67f3034097ac9665a1ac1e374a101a45e556a89f039192222f0a7d22628d2afef6f2555908b0c556be110654adcc4dfbe4bd2acfedab327ec165ff670
- SSDEEP 49152:682n2SjT1taSnhMdcW4/nbuKufiDazbKRGqpso9A5hEGX8FUYVkv354kwz9k:6822SjCSqdcWSC2RGiuo+5fwa
- TLSH T16ED59E2F7649C57AE2131D395D88EA54E2B4F860CF6288C373C85B5F2A747C35E325A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_8af0473e8225983cb1127e2ca8ed9db9_akira_amadey_darkgate_elex_floxif_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_8af0473e8225983cb1127e2ca8ed9db9_akira_amadey_darkgate_elex_floxif_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_8af0473e8225983cb1127e2ca8ed9db9_akira_amadey_darkgate_elex_floxif_luca-stealer_njrat
- Size 2.8MB
- SHA256 8eadf2bb974d9e80866397e804041f952a43743eda4df92ecfdc2bea78e3e336
- MD5 8af0473e8225983cb1127e2ca8ed9db9
- SHA1 7b092ad067258827ea41f2c1384206a6e04ae60c
- SHA512 241f88e67f3034097ac9665a1ac1e374a101a45e556a89f039192222f0a7d22628d2afef6f2555908b0c556be110654adcc4dfbe4bd2acfedab327ec165ff670
- SSDEEP 49152:682n2SjT1taSnhMdcW4/nbuKufiDazbKRGqpso9A5hEGX8FUYVkv354kwz9k:6822SjCSqdcWSC2RGiuo+5fwa
- TLSH T16ED59E2F7649C57AE2131D395D88EA54E2B4F860CF6288C373C85B5F2A747C35E325A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.