General
- Target 2026-07-11_d99b787610c18ab4478f82e6f85f63fe_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- Sample260711-pg14xaat3k
- SHA256 b0c07fd90b20687d2826231a412fb7d820d0d36a412eb14b7c0072033b4bdf82
- MD5 d99b787610c18ab4478f82e6f85f63fe
- SHA1 906fad43f2206d3c045ebb6a0b1e7b062eddf173
- SHA512 c378a523183a6dbd442cacfa3e5f76bee5633dccac68d020d6de58187b929e8a4ca548b0ad3647f2d458ed3269fb2ebb6530923148cca19eb3211c81d57c8be7
- SSDEEP 196608:7hg6beZFHkr2hsEQjPwRWn+MJnSX/j28gA8kIEjXyFkhR:NgQeHH82hhQjPwRWRSTIEjwu
- TLSH T109961294F225F114D3A1013188287AA858665D303B95D9E7BF8F3AD259786D3EEB0F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_d99b787610c18ab4478f82e6f85f63fe_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_d99b787610c18ab4478f82e6f85f63fe_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_d99b787610c18ab4478f82e6f85f63fe_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- SHA256 b0c07fd90b20687d2826231a412fb7d820d0d36a412eb14b7c0072033b4bdf82
- MD5 d99b787610c18ab4478f82e6f85f63fe
- SHA1 906fad43f2206d3c045ebb6a0b1e7b062eddf173
- SHA512 c378a523183a6dbd442cacfa3e5f76bee5633dccac68d020d6de58187b929e8a4ca548b0ad3647f2d458ed3269fb2ebb6530923148cca19eb3211c81d57c8be7
- SSDEEP 196608:7hg6beZFHkr2hsEQjPwRWn+MJnSX/j28gA8kIEjXyFkhR:NgQeHH82hhQjPwRWRSTIEjwu
- TLSH T109961294F225F114D3A1013188287AA858665D303B95D9E7BF8F3AD259786D3EEB0F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.