General
- Target 2026-07-14_366b693b12af7ccb955b99f6a70e514f_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_lynx_njrat
- Size 9.2MB
- Sample260714-xvrrdsev7s
- SHA256 54e2f0c1e450704fdeac567079e9f1838d385226f6304ad2b50d46838c4867fa
- MD5 366b693b12af7ccb955b99f6a70e514f
- SHA1 b63d44dcc771908e4bad72331eac3639674009bf
- SHA512 051a6d5cdedd492ef8219c235d6a0892580a0d4af0a86045dafca05787586b9cc0cff0d8ab9b36528b95ad1c8521e435f447aa7cee1f882abd3b5cab0bb4a997
- SSDEEP 196608:mrOxvwUAhxhw2WhHVUBzOW+ylpWQiZMwrXREl:mrOR+hxhwCBzOhQwql
- TLSH T1B5A6BF41BA529071CA411870EF2DBB766B2C1E5E27B585E3E6EC5C603FB24C1372A787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_366b693b12af7ccb955b99f6a70e514f_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_366b693b12af7ccb955b99f6a70e514f_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_366b693b12af7ccb955b99f6a70e514f_amadey_darkgate_elex_glassworm_hijackloader_luca-stealer_lynx_njrat
- Size 9.2MB
- SHA256 54e2f0c1e450704fdeac567079e9f1838d385226f6304ad2b50d46838c4867fa
- MD5 366b693b12af7ccb955b99f6a70e514f
- SHA1 b63d44dcc771908e4bad72331eac3639674009bf
- SHA512 051a6d5cdedd492ef8219c235d6a0892580a0d4af0a86045dafca05787586b9cc0cff0d8ab9b36528b95ad1c8521e435f447aa7cee1f882abd3b5cab0bb4a997
- SSDEEP 196608:mrOxvwUAhxhw2WhHVUBzOW+ylpWQiZMwrXREl:mrOR+hxhwCBzOhQwql
- TLSH T1B5A6BF41BA529071CA411870EF2DBB766B2C1E5E27B585E3E6EC5C603FB24C1372A787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory