General
- Target 2026-07-16_112d0faa568262ee3a2ee77d19cfeca7_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 1.6MB
- Sample260716-pcbnfscw7l
- SHA256 8639f3de6ba89afa0d4e2121a69e19b5d3715e800e34ed93accb548b8e1b925f
- MD5 112d0faa568262ee3a2ee77d19cfeca7
- SHA1 0468b3dad571779cf3c46dac89cd1d369108b56a
- SHA512 118f54313a943a5f215cffe37fa487e46cbb9513a6a4eab6a089caedf1919c855f26dbffc4a001be7be48c4391eee2b93b2c3237feb7b437eadc10672bc6f0ec
- SSDEEP 24576:dMMF9m96EJz4ddUIsVsjo+NHruc5T+v8zVW76r0KA3qHwg4xteLG:lF8nz4ddUI3jo+NHruYXch/3qHiXeLG
- TLSH T17875E02139E6D072E57346304DBAD21155AFB8310F3189DB37E8562E2F759C2AB32B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_112d0faa568262ee3a2ee77d19cfeca7_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_112d0faa568262ee3a2ee77d19cfeca7_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 1.6MB
- SHA256 8639f3de6ba89afa0d4e2121a69e19b5d3715e800e34ed93accb548b8e1b925f
- MD5 112d0faa568262ee3a2ee77d19cfeca7
- SHA1 0468b3dad571779cf3c46dac89cd1d369108b56a
- SHA512 118f54313a943a5f215cffe37fa487e46cbb9513a6a4eab6a089caedf1919c855f26dbffc4a001be7be48c4391eee2b93b2c3237feb7b437eadc10672bc6f0ec
- SSDEEP 24576:dMMF9m96EJz4ddUIsVsjo+NHruc5T+v8zVW76r0KA3qHwg4xteLG:lF8nz4ddUI3jo+NHruYXch/3qHiXeLG
- TLSH T17875E02139E6D072E57346304DBAD21155AFB8310F3189DB37E8562E2F759C2AB32B63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1