General
- Target 2026-07-07_b8ea4dec7db694af7c421bfc7290f720_amadey_darkgate_elex_floxif_hellokitty_luca-stealer_njrat
- Size 1.5MB
- Sample260707-l2b4qsct9n
- SHA256 a13f4e4aba83b739ef6d77f9b42d5e887a1e0ba36c4fd610a82ce211a41c9a70
- MD5 b8ea4dec7db694af7c421bfc7290f720
- SHA1 6a5be7c6de22d484af12256eb264a929a3ab3cce
- SHA512 779e28600e84c2758a2f5df6767456dc013e24c6fa14efe5217025217e27b8373e1d669e8613cc681c39ea53586cd40d5bc4d68f0c4d0d986222915737344106
- SSDEEP 24576:4wyf3Su4a/KnwYtDXl42hxt3q7lR3hVtTcKaBQ7SdBZpeUY:tyf3L4aGweXl1h/C3Jc9BQ7SdPMh
- TLSH T12375221176E14031F6B3193056F09A710E3ABD391BB5A89F13E12E2D1B78AD1E774B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_b8ea4dec7db694af7c421bfc7290f720_amadey_darkgate_elex_floxif_hellokitty_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_b8ea4dec7db694af7c421bfc7290f720_amadey_darkgate_elex_floxif_hellokitty_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_b8ea4dec7db694af7c421bfc7290f720_amadey_darkgate_elex_floxif_hellokitty_luca-stealer_njrat
- Size 1.5MB
- SHA256 a13f4e4aba83b739ef6d77f9b42d5e887a1e0ba36c4fd610a82ce211a41c9a70
- MD5 b8ea4dec7db694af7c421bfc7290f720
- SHA1 6a5be7c6de22d484af12256eb264a929a3ab3cce
- SHA512 779e28600e84c2758a2f5df6767456dc013e24c6fa14efe5217025217e27b8373e1d669e8613cc681c39ea53586cd40d5bc4d68f0c4d0d986222915737344106
- SSDEEP 24576:4wyf3Su4a/KnwYtDXl42hxt3q7lR3hVtTcKaBQ7SdBZpeUY:tyf3L4aGweXl1h/C3Jc9BQ7SdPMh
- TLSH T12375221176E14031F6B3193056F09A710E3ABD391BB5A89F13E12E2D1B78AD1E774B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.