General
- Target 2026-07-17_d9a96f601abbe8f90163dc8e13be013d_amadey_darkgate_elex_luca-stealer_lynx_magniber_njrat
- Size 3.3MB
- Sample260718-b9rjaacv2q
- SHA256 5d685259105ba073a62d411e86a033609b438868988ec6933f56853c3e9b9658
- MD5 d9a96f601abbe8f90163dc8e13be013d
- SHA1 8f5c0ce21674ef043f029a8cac773d4ec7967d24
- SHA512 89998ae99d1c06c49b53466abb08bc378c357b1774f76eb7009b17ea368d028d2d1a81995d7af03f41ba5d7386ddb8aa23058876939294448b453f80f125b648
- SSDEEP 49152:sZOATAK7IjnDreNwL934vsDEuJUNliAceq58uCiqHUzj23P2jCe8SiQXZH0:sZ9TWDreQDEuJU9mGji1C450
- TLSH T141F5AF217701C4B6D95302B0ADBDEA5F816DBE218F7414C7B3D82F6E55B19C21B32A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_d9a96f601abbe8f90163dc8e13be013d_amadey_darkgate_elex_luca-stealer_lynx_magniber_njrat.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_d9a96f601abbe8f90163dc8e13be013d_amadey_darkgate_elex_luca-stealer_lynx_magniber_njrat.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_d9a96f601abbe8f90163dc8e13be013d_amadey_darkgate_elex_luca-stealer_lynx_magniber_njrat
- Size 3.3MB
- SHA256 5d685259105ba073a62d411e86a033609b438868988ec6933f56853c3e9b9658
- MD5 d9a96f601abbe8f90163dc8e13be013d
- SHA1 8f5c0ce21674ef043f029a8cac773d4ec7967d24
- SHA512 89998ae99d1c06c49b53466abb08bc378c357b1774f76eb7009b17ea368d028d2d1a81995d7af03f41ba5d7386ddb8aa23058876939294448b453f80f125b648
- SSDEEP 49152:sZOATAK7IjnDreNwL934vsDEuJUNliAceq58uCiqHUzj23P2jCe8SiQXZH0:sZ9TWDreQDEuJU9mGji1C450
- TLSH T141F5AF217701C4B6D95302B0ADBDEA5F816DBE218F7414C7B3D82F6E55B19C21B32A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1