General
- Target 2026-07-15_a8d95049b8b757772191bd95f3f279fe_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat
- Size 2.0MB
- Sample260715-np3f9sa17r
- SHA256 d6117bd2ed91ab5868cddf86b217e07853368bbb8081264a2035dfc78faffeff
- MD5 a8d95049b8b757772191bd95f3f279fe
- SHA1 23ef7b82627a4f6ba5d67b1cb1852c4d22e14cf7
- SHA512 3ed8d02de734b6f8b46c0bfe4603e833ab85d57a47c5574507780a3123e73bb12488c0b406fd1bdf4ae0116c86b0484aff5dda79d32c8fcb0c509d5859afe38b
- SSDEEP 49152:IKKeMYeEAYOW1+M5A83M+svqia5R1uEpNN0GYWLBdWtLw8ploRv:tKPW1+M5NRfuEpL0GYW7elop
- TLSH T19CA55B1177E95A29F1FB2B71AEB851604A7B7C615F31C7CF13802A5E2970AC09936B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_a8d95049b8b757772191bd95f3f279fe_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_a8d95049b8b757772191bd95f3f279fe_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_a8d95049b8b757772191bd95f3f279fe_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat
- Size 2.0MB
- SHA256 d6117bd2ed91ab5868cddf86b217e07853368bbb8081264a2035dfc78faffeff
- MD5 a8d95049b8b757772191bd95f3f279fe
- SHA1 23ef7b82627a4f6ba5d67b1cb1852c4d22e14cf7
- SHA512 3ed8d02de734b6f8b46c0bfe4603e833ab85d57a47c5574507780a3123e73bb12488c0b406fd1bdf4ae0116c86b0484aff5dda79d32c8fcb0c509d5859afe38b
- SSDEEP 49152:IKKeMYeEAYOW1+M5A83M+svqia5R1uEpNN0GYWLBdWtLw8ploRv:tKPW1+M5NRfuEpL0GYW7elop
- TLSH T19CA55B1177E95A29F1FB2B71AEB851604A7B7C615F31C7CF13802A5E2970AC09936B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Downloads MZ/PE file
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE