General
- Target 2026-07-12_cfb36a8284d8d825dd37a91ba338bfc5_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat
- Size 10.7MB
- Sample260712-thk7ascx9m
- SHA256 c2fa7fbb37291071bed6270734d68906c8c95ec0b79292350ccfe86f87e8be71
- MD5 cfb36a8284d8d825dd37a91ba338bfc5
- SHA1 e9a4cc877716426e11669a254526b2c7c0a9f870
- SHA512 298c55e43488c4122f8863bbd91ade111fb8f0e093da28f11fe05618076b74134ded1e433189cd87181d3a927088509380f4ac68dc0475285518c7e81442acf0
- SSDEEP 196608:bx+tCrPrZ6Wm/IWev2rgp//SymSkx0LODZ2bHz/HD/HZFpzmgGituKZcLPYSu2UN:tYCrPrEWm/IWa//hkZ2bHz/HD/HZdtuE
- TLSH T15BB6B5D4A212F444E3E804B1251973D84A132E357B14CAEA3E9727DA6A5C185BDF2F3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_cfb36a8284d8d825dd37a91ba338bfc5_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_cfb36a8284d8d825dd37a91ba338bfc5_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_cfb36a8284d8d825dd37a91ba338bfc5_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat
- Size 10.7MB
- SHA256 c2fa7fbb37291071bed6270734d68906c8c95ec0b79292350ccfe86f87e8be71
- MD5 cfb36a8284d8d825dd37a91ba338bfc5
- SHA1 e9a4cc877716426e11669a254526b2c7c0a9f870
- SHA512 298c55e43488c4122f8863bbd91ade111fb8f0e093da28f11fe05618076b74134ded1e433189cd87181d3a927088509380f4ac68dc0475285518c7e81442acf0
- SSDEEP 196608:bx+tCrPrZ6Wm/IWev2rgp//SymSkx0LODZ2bHz/HD/HZFpzmgGituKZcLPYSu2UN:tYCrPrEWm/IWa//hkZ2bHz/HD/HZdtuE
- TLSH T15BB6B5D4A212F444E3E804B1251973D84A132E357B14CAEA3E9727DA6A5C185BDF2F3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.