General
- Target 2026-07-08_8b73dc13f5f9d7ff0ed1b36c6480d889_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 1.7MB
- Sample260708-kdg5eaet7k
- SHA256 00c8e7e4c28045e7dbef7593cae81839f6e22a030e1688997d4d3b7ab4b98155
- MD5 8b73dc13f5f9d7ff0ed1b36c6480d889
- SHA1 66d165dea0d4a3e356becc2acfe688e54cc23ceb
- SHA512 3220b9429411d36a1dcde2370132309f4f3215991c249a7a8a328b1240389a018365bbb615d88ce4a155449a792e0f10235db04cb8ea1138a1fd9c5ee17efaba
- SSDEEP 12288:ggqz7jPd/DwIzE5jjXa9GXpgi+hxfN6V7xjGDjWpbRYOypsu8xdaOv4GVvGr0ZJk:gN/PTS1pgiyxknw4FYnshx8OfVe247
- TLSH T1F485E01376D28071EDF219320DF497BA166EBD210BF389AB939426BD4E70DD19634B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_8b73dc13f5f9d7ff0ed1b36c6480d889_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_8b73dc13f5f9d7ff0ed1b36c6480d889_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 1.7MB
- SHA256 00c8e7e4c28045e7dbef7593cae81839f6e22a030e1688997d4d3b7ab4b98155
- MD5 8b73dc13f5f9d7ff0ed1b36c6480d889
- SHA1 66d165dea0d4a3e356becc2acfe688e54cc23ceb
- SHA512 3220b9429411d36a1dcde2370132309f4f3215991c249a7a8a328b1240389a018365bbb615d88ce4a155449a792e0f10235db04cb8ea1138a1fd9c5ee17efaba
- SSDEEP 12288:ggqz7jPd/DwIzE5jjXa9GXpgi+hxfN6V7xjGDjWpbRYOypsu8xdaOv4GVvGr0ZJk:gN/PTS1pgiyxknw4FYnshx8OfVe247
- TLSH T1F485E01376D28071EDF219320DF497BA166EBD210BF389AB939426BD4E70DD19634B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1