General
- Target 2026-07-15_ac8308a61230862ddb2effae85b7f803_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 1.6MB
- Sample260715-nn2tcaa15j
- SHA256 d402945496143c544d5c9d4249f03657569ec2fd3c019c7bd11e2b9e1740801b
- MD5 ac8308a61230862ddb2effae85b7f803
- SHA1 a344538fc8e5459ad6b34ab9f6be04a1bd330219
- SHA512 1180b69e181b7c77c24166201c8e870d3ce7b6b31034beb86291fd0ec73f779ff2e62d707ef19213b18f9c67a471fc632e2c128b6cabd9e0d4336de095aa6e65
- SSDEEP 24576:AMMF9m96EJz4ddUIsVsjo+NHru65T+v8zVW76r0KA3qHwg4xteLG:oF8nz4ddUI3jo+NHruSXch/3qHiXeLG
- TLSH T1CD75E02139E6D072E57346304DBAD21155AFB8310F3189DB37E8562E2F759C2AB32B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_ac8308a61230862ddb2effae85b7f803_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_ac8308a61230862ddb2effae85b7f803_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 1.6MB
- SHA256 d402945496143c544d5c9d4249f03657569ec2fd3c019c7bd11e2b9e1740801b
- MD5 ac8308a61230862ddb2effae85b7f803
- SHA1 a344538fc8e5459ad6b34ab9f6be04a1bd330219
- SHA512 1180b69e181b7c77c24166201c8e870d3ce7b6b31034beb86291fd0ec73f779ff2e62d707ef19213b18f9c67a471fc632e2c128b6cabd9e0d4336de095aa6e65
- SSDEEP 24576:AMMF9m96EJz4ddUIsVsjo+NHru65T+v8zVW76r0KA3qHwg4xteLG:oF8nz4ddUI3jo+NHruSXch/3qHiXeLG
- TLSH T1CD75E02139E6D072E57346304DBAD21155AFB8310F3189DB37E8562E2F759C2AB32B63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1