General
- Target 2026-07-12_ef5925fb93195df6d561ad557ed8697d_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- Sample260712-s8j69aev4s
- SHA256 4c32a0937509410c09c2100b5b5c0111a156ff03afd412434655a444056442c2
- MD5 ef5925fb93195df6d561ad557ed8697d
- SHA1 cbd2575811a9945dfc09838412068bbc5133ec02
- SHA512 46f7a1f0e57e3635260083614ad6da141a1dc085ac02780bf1211ce195e50f5c33a60a18fa28441c59aed333fd58c1a242eceb8e54c29f79aa25832c9184715f
- SSDEEP 196608:WLU4Kr3lqj+e9l0IlAbtYiacfhE7yy9EXV+p3TxeyPkk+XyFkhx:Ud9S4AbacZjyi+pFWrwW
- TLSH T1AC9622C0F221F558E3540171982976A4492A1A303755E9EBBF8F3AD159782E3EEB4F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_ef5925fb93195df6d561ad557ed8697d_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_ef5925fb93195df6d561ad557ed8697d_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_ef5925fb93195df6d561ad557ed8697d_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- SHA256 4c32a0937509410c09c2100b5b5c0111a156ff03afd412434655a444056442c2
- MD5 ef5925fb93195df6d561ad557ed8697d
- SHA1 cbd2575811a9945dfc09838412068bbc5133ec02
- SHA512 46f7a1f0e57e3635260083614ad6da141a1dc085ac02780bf1211ce195e50f5c33a60a18fa28441c59aed333fd58c1a242eceb8e54c29f79aa25832c9184715f
- SSDEEP 196608:WLU4Kr3lqj+e9l0IlAbtYiacfhE7yy9EXV+p3TxeyPkk+XyFkhx:Ud9S4AbacZjyi+pFWrwW
- TLSH T1AC9622C0F221F558E3540171982976A4492A1A303755E9EBBF8F3AD159782E3EEB4F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.