General
- Target 2026-07-08_f62f7f64049051c30f505bddce9cc8ae_akira_amadey_darkgate_elex_floxif_luca-stealer_njrat
- Size 2.8MB
- Sample260708-m4xc5afv8p
- SHA256 4ba5505b03814836ab6e79602f9d161d4538089c5d594e1ada9f9b8a0a630291
- MD5 f62f7f64049051c30f505bddce9cc8ae
- SHA1 9d52d123a8bc94b7d9e3a783145878db50ffa663
- SHA512 3c7b103149e023358f8ead00df07e5f01a80b3cb3e13fd7aecb024aaf158bf0d44bde46f96e7ef18ea195f50c1ac46d9d32c58bff7061f37ad8dee11f4a4f667
- SSDEEP 49152:h03knOnaEKcje4KE3xDScxJ7g6SXkTXzQcL41EErbkSwKhIGXWFBYVkv354DrW2:h03kOnawBNBDSc/TeEaPX+5+z
- TLSH T167D58E2E72C5C5BBE2131D796D88E694E274F830CF6248D773844B4E2A717D35E326A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_f62f7f64049051c30f505bddce9cc8ae_akira_amadey_darkgate_elex_floxif_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_f62f7f64049051c30f505bddce9cc8ae_akira_amadey_darkgate_elex_floxif_luca-stealer_njrat.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_f62f7f64049051c30f505bddce9cc8ae_akira_amadey_darkgate_elex_floxif_luca-stealer_njrat
- Size 2.8MB
- SHA256 4ba5505b03814836ab6e79602f9d161d4538089c5d594e1ada9f9b8a0a630291
- MD5 f62f7f64049051c30f505bddce9cc8ae
- SHA1 9d52d123a8bc94b7d9e3a783145878db50ffa663
- SHA512 3c7b103149e023358f8ead00df07e5f01a80b3cb3e13fd7aecb024aaf158bf0d44bde46f96e7ef18ea195f50c1ac46d9d32c58bff7061f37ad8dee11f4a4f667
- SSDEEP 49152:h03knOnaEKcje4KE3xDScxJ7g6SXkTXzQcL41EErbkSwKhIGXWFBYVkv354DrW2:h03kOnawBNBDSc/TeEaPX+5+z
- TLSH T167D58E2E72C5C5BBE2131D796D88E694E274F830CF6248D773844B4E2A717D35E326A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.