General
- Target 2026-07-09_5930547316a52f270653c9dcc3c751ae_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat
- Size 2.1MB
- Sample260709-khk2vsf18z
- SHA256 d9430359ff9c9859a52e9df43c1cd1e453dcd997def009bb97db413369f7cf4e
- MD5 5930547316a52f270653c9dcc3c751ae
- SHA1 3b16799fea5922b7f784ed68e7ddd9c7197cf16e
- SHA512 a42f5101f000f4a9c77c943bc8e89d35ac6dbed0e07d3b57bb4d4f245d0a9fd228bd452a7b71006aeb435ea4010e123999b21a02f70aa08c8d65f30c8d572f35
- SSDEEP 49152:NETvrAVde3TBf8GPxpUTcqFOciydUdlbKLKrcUo3pPDJTikFtNf+:NErGOqFOciuowpPx7f
- TLSH T15AA55C1177E95A28F5FB2771AEB841A44A7B7C616F35C6CF13801A5E3930AC09936B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_5930547316a52f270653c9dcc3c751ae_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_5930547316a52f270653c9dcc3c751ae_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260706-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_5930547316a52f270653c9dcc3c751ae_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat
- Size 2.1MB
- SHA256 d9430359ff9c9859a52e9df43c1cd1e453dcd997def009bb97db413369f7cf4e
- MD5 5930547316a52f270653c9dcc3c751ae
- SHA1 3b16799fea5922b7f784ed68e7ddd9c7197cf16e
- SHA512 a42f5101f000f4a9c77c943bc8e89d35ac6dbed0e07d3b57bb4d4f245d0a9fd228bd452a7b71006aeb435ea4010e123999b21a02f70aa08c8d65f30c8d572f35
- SSDEEP 49152:NETvrAVde3TBf8GPxpUTcqFOciydUdlbKLKrcUo3pPDJTikFtNf+:NErGOqFOciuowpPx7f
- TLSH T15AA55C1177E95A28F5FB2771AEB841A44A7B7C616F35C6CF13801A5E3930AC09936B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE