General
- Target 2026-07-06_e9dbd046479474ae182c8cdaabefe51d_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 2.3MB
- Sample260706-pwbskafs8w
- SHA256 4ea21053f91545b1c516a3e80142727b2a9e38b9d113d8b201223ba491d7dad5
- MD5 e9dbd046479474ae182c8cdaabefe51d
- SHA1 98cfda1c6900d28e1f34627223e566be48054242
- SHA512 b9a66e0fb28ac6ae5d174a369048df4509199267277befb653b49be6e01facbafde84168c666c3bce08008194d8eaff67ae720dacc711fabd5efebd5a0c119b0
- SSDEEP 49152:2f0kcOnkk8kPt7+zQFZw8mv/Dmg27RnWGj:28kxl8kPUEw8kD527BWG
- TLSH T1CEB52A20BAB6414FDB9916B82EBCAF9D22AC69490B6059C3738C975D0CF11D344FB376
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-06_e9dbd046479474ae182c8cdaabefe51d_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_e9dbd046479474ae182c8cdaabefe51d_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_e9dbd046479474ae182c8cdaabefe51d_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 2.3MB
- SHA256 4ea21053f91545b1c516a3e80142727b2a9e38b9d113d8b201223ba491d7dad5
- MD5 e9dbd046479474ae182c8cdaabefe51d
- SHA1 98cfda1c6900d28e1f34627223e566be48054242
- SHA512 b9a66e0fb28ac6ae5d174a369048df4509199267277befb653b49be6e01facbafde84168c666c3bce08008194d8eaff67ae720dacc711fabd5efebd5a0c119b0
- SSDEEP 49152:2f0kcOnkk8kPt7+zQFZw8mv/Dmg27RnWGj:28kxl8kPUEw8kD527BWG
- TLSH T1CEB52A20BAB6414FDB9916B82EBCAF9D22AC69490B6059C3738C975D0CF11D344FB376
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.