General
- Target 2026-07-11_dafec42776a5a3774a20e4aeeedf5099_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- Sample260711-pgsgrsas9m
- SHA256 a1b304953d58008e4ceb71e7e31d0d36417b5495089a650af5c59480aa296cc0
- MD5 dafec42776a5a3774a20e4aeeedf5099
- SHA1 2f020f6a3114b51d14361ba306300f8af4a4f000
- SHA512 82f764634278416c3cc04b47984f88d1622ab8947e9c56e9ffe680162411d6a23ab76a6f0cdabb2d7bea2382478e17d3b73a457a00a936d51175a9557d1a01bd
- SSDEEP 196608:BQ0ujAhCKmMmcIYeMkR3H7Zqya+eOv78YhqGycoLLJXyFkhZ:q0ujPMmoeRZIT3PJwi
- TLSH T1579622C5F224F259E3600130892476A818696D303742D9EBBE8F36D9593D6D3AEB1F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_dafec42776a5a3774a20e4aeeedf5099_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_dafec42776a5a3774a20e4aeeedf5099_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_dafec42776a5a3774a20e4aeeedf5099_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- SHA256 a1b304953d58008e4ceb71e7e31d0d36417b5495089a650af5c59480aa296cc0
- MD5 dafec42776a5a3774a20e4aeeedf5099
- SHA1 2f020f6a3114b51d14361ba306300f8af4a4f000
- SHA512 82f764634278416c3cc04b47984f88d1622ab8947e9c56e9ffe680162411d6a23ab76a6f0cdabb2d7bea2382478e17d3b73a457a00a936d51175a9557d1a01bd
- SSDEEP 196608:BQ0ujAhCKmMmcIYeMkR3H7Zqya+eOv78YhqGycoLLJXyFkhZ:q0ujPMmoeRZIT3PJwi
- TLSH T1579622C5F224F259E3600130892476A818696D303742D9EBBE8F36D9593D6D3AEB1F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.