General
- Target 2026-07-09_b837d2a14de3a08431f893cd4caa985c_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 1.2MB
- Sample260709-t5eb9sew4s
- SHA256 5b50736b5d78950c5f3c3528e7b99c550ce742d2a76152c8c737f912276c3402
- MD5 b837d2a14de3a08431f893cd4caa985c
- SHA1 3d82c13983f3ee4bb49759840b9d624a104f245a
- SHA512 1599e87a96aebff2777bc830006c7745bb6ce746c28b8962a3febbafad823797c20f6d14fc7175fc83907666d609d454ab4f23f005af9326f70e7ee049dfd8af
- SSDEEP 24576:uqYJmyOHv+MYsl9Pmbv72Hx0xQ/lII6m1xw5a0/YV:bYJEP+sHPmbv72ROQ/l6mnw5a0wV
- TLSH T17045381133E5813AF6B207306D7CA6A4567ABC621B3285CF739C6A5D1B30AD19B31B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_b837d2a14de3a08431f893cd4caa985c_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_b837d2a14de3a08431f893cd4caa985c_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_b837d2a14de3a08431f893cd4caa985c_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 1.2MB
- SHA256 5b50736b5d78950c5f3c3528e7b99c550ce742d2a76152c8c737f912276c3402
- MD5 b837d2a14de3a08431f893cd4caa985c
- SHA1 3d82c13983f3ee4bb49759840b9d624a104f245a
- SHA512 1599e87a96aebff2777bc830006c7745bb6ce746c28b8962a3febbafad823797c20f6d14fc7175fc83907666d609d454ab4f23f005af9326f70e7ee049dfd8af
- SSDEEP 24576:uqYJmyOHv+MYsl9Pmbv72Hx0xQ/lII6m1xw5a0/YV:bYJEP+sHPmbv72ROQ/l6mnw5a0wV
- TLSH T17045381133E5813AF6B207306D7CA6A4567ABC621B3285CF739C6A5D1B30AD19B31B37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.