General
- Target 2026-07-23_485f13d16d2a041a322edb559e43b88d_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- Sample260723-p74mqaxvbv
- SHA256 96436af4f876bba2319c25187dd89380b1afb5fc9200bb6850fff5f301f5fd65
- MD5 485f13d16d2a041a322edb559e43b88d
- SHA1 d54475e5228dab30153063d8d524394e68f0fbe1
- SHA512 8292d0cd0917a74fac339464290dbbec0aab66b070acc6523af98e5f7e7a0439e6e3aa8d0284be4cf40e1907d22bd23f1accdec85bced94f95e5b4ec844a30d2
- SSDEEP 196608:/IjeVR/+/noGh7USrNqrnaFgSxU4CiikfPhG6GkOiGXyFkh3:wjiRJsZNIqgJi/PQrDwE
- TLSH T15A9612D1F225F408E7A4013198383664596A1A307745D8ABBF8F36D699782D3BEB0F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_485f13d16d2a041a322edb559e43b88d_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_485f13d16d2a041a322edb559e43b88d_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_485f13d16d2a041a322edb559e43b88d_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- SHA256 96436af4f876bba2319c25187dd89380b1afb5fc9200bb6850fff5f301f5fd65
- MD5 485f13d16d2a041a322edb559e43b88d
- SHA1 d54475e5228dab30153063d8d524394e68f0fbe1
- SHA512 8292d0cd0917a74fac339464290dbbec0aab66b070acc6523af98e5f7e7a0439e6e3aa8d0284be4cf40e1907d22bd23f1accdec85bced94f95e5b4ec844a30d2
- SSDEEP 196608:/IjeVR/+/noGh7USrNqrnaFgSxU4CiikfPhG6GkOiGXyFkh3:wjiRJsZNIqgJi/PQrDwE
- TLSH T15A9612D1F225F408E7A4013198383664596A1A307745D8ABBF8F36D699782D3BEB0F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.