General
- Target 2026-07-09_25045c264e92c9b1a93084a8d8c9e8dc_amadey_darkgate_elex_hellokitty_luca-stealer_lynx_njrat_smoke-loader
- Size 1.6MB
- Sample260709-cvdvbacy7t
- SHA256 f0010c7e2ad3563252bf11473fe59458fa4874b3a053ee6cfc0e2e454a1d6af3
- MD5 25045c264e92c9b1a93084a8d8c9e8dc
- SHA1 51460cd9f44086158031695aa02e94d9a05cc1d4
- SHA512 26624cf0d334070f668219b942a20e3bd73d60bcbaef642375b271fe7bdac903fecf4d7638c9c27b511b14cca6b0e9d2ed8a88eadb5118a07c9fd624decc1056
- SSDEEP 24576:Q+8DOeatY00qinBToNiSnnrFb4PM4MYgLxEVyGLB:Q+ZeayhqiJoNdj4MYPVyGLB
- TLSH T1FB75E02176E18072E9F72A3018B4A7B55A3EBD305E34D59FA394167E5E31AC0CA31B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_25045c264e92c9b1a93084a8d8c9e8dc_amadey_darkgate_elex_hellokitty_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_25045c264e92c9b1a93084a8d8c9e8dc_amadey_darkgate_elex_hellokitty_luca-stealer_lynx_njrat_smoke-loader
- Size 1.6MB
- SHA256 f0010c7e2ad3563252bf11473fe59458fa4874b3a053ee6cfc0e2e454a1d6af3
- MD5 25045c264e92c9b1a93084a8d8c9e8dc
- SHA1 51460cd9f44086158031695aa02e94d9a05cc1d4
- SHA512 26624cf0d334070f668219b942a20e3bd73d60bcbaef642375b271fe7bdac903fecf4d7638c9c27b511b14cca6b0e9d2ed8a88eadb5118a07c9fd624decc1056
- SSDEEP 24576:Q+8DOeatY00qinBToNiSnnrFb4PM4MYgLxEVyGLB:Q+ZeayhqiJoNdj4MYPVyGLB
- TLSH T1FB75E02176E18072E9F72A3018B4A7B55A3EBD305E34D59FA394167E5E31AC0CA31B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1