General
- Target 2026-07-07_6641223fb03316a921b925982cc27625_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 2.3MB
- Sample260707-js5ctaas9q
- SHA256 db766e065c5977ec3b25b5017a190689fd8f1a9c746352de7fc0dedf93dd21d8
- MD5 6641223fb03316a921b925982cc27625
- SHA1 5a5a88d63a00d9f95b09de3edae8cc7b1bc75004
- SHA512 99cb538cee4f3299078f9ab32c0ff8615fb25a1cad66be8c9fb31b0cb90f6b29c8f19bed08f206f2e91b22045ef8658f62d963e7dc56a51aeada1e55a3f5c45e
- SSDEEP 49152:2N0kcOnkB8kPt7+zQFZw8mvKQ/lFTjN4:26kx88kPUEw8CLm
- TLSH T17BB51A20BAB6414FDB9916B82EBC9F9D22AC69490B6069C3738C975D0CF11D344FB376
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-07_6641223fb03316a921b925982cc27625_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_6641223fb03316a921b925982cc27625_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_6641223fb03316a921b925982cc27625_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 2.3MB
- SHA256 db766e065c5977ec3b25b5017a190689fd8f1a9c746352de7fc0dedf93dd21d8
- MD5 6641223fb03316a921b925982cc27625
- SHA1 5a5a88d63a00d9f95b09de3edae8cc7b1bc75004
- SHA512 99cb538cee4f3299078f9ab32c0ff8615fb25a1cad66be8c9fb31b0cb90f6b29c8f19bed08f206f2e91b22045ef8658f62d963e7dc56a51aeada1e55a3f5c45e
- SSDEEP 49152:2N0kcOnkB8kPt7+zQFZw8mvKQ/lFTjN4:26kx88kPUEw8CLm
- TLSH T17BB51A20BAB6414FDB9916B82EBC9F9D22AC69490B6069C3738C975D0CF11D344FB376
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.