General
- Target 2026-07-06_90c9934f025c0960c993107c497f9c63_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 2.6MB
- Sample260706-ngs8maes4y
- SHA256 596d39d29dbed2a8b069cb817b029276065c3e3aaf73971fae87aac7111a08af
- MD5 90c9934f025c0960c993107c497f9c63
- SHA1 6c4d41e65c740a84b99bd6d930cac315d374ac84
- SHA512 cbffad6e1f5c0314ae7aa571365f7bcb1cc7c87ac48ec42f6893ad304f9ba87dfde908167eb5918a9d1b72109bd71b4c494908aa3aac6c0c63d101899e2c531d
- SSDEEP 49152:Bq3FRL1yQaeZxUEg3LnZyswdFFp/IUs0Tte9vPb5XjBuKQAxUsZn3zAj:BkRpy7AUEg3LnZysw7Fp/IURTte9vPbX
- TLSH T11DC59F213AC0207ADD530232DAC8F339B3BDA6741A3582C352D49B28FDF6593597A56F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_90c9934f025c0960c993107c497f9c63_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_90c9934f025c0960c993107c497f9c63_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_90c9934f025c0960c993107c497f9c63_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 2.6MB
- SHA256 596d39d29dbed2a8b069cb817b029276065c3e3aaf73971fae87aac7111a08af
- MD5 90c9934f025c0960c993107c497f9c63
- SHA1 6c4d41e65c740a84b99bd6d930cac315d374ac84
- SHA512 cbffad6e1f5c0314ae7aa571365f7bcb1cc7c87ac48ec42f6893ad304f9ba87dfde908167eb5918a9d1b72109bd71b4c494908aa3aac6c0c63d101899e2c531d
- SSDEEP 49152:Bq3FRL1yQaeZxUEg3LnZyswdFFp/IUs0Tte9vPb5XjBuKQAxUsZn3zAj:BkRpy7AUEg3LnZysw7Fp/IURTte9vPbX
- TLSH T11DC59F213AC0207ADD530232DAC8F339B3BDA6741A3582C352D49B28FDF6593597A56F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory