General
- Target 2026-07-27_7195d73d27c0c92b66e228dccf1e764c_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- Sample260727-nf4mzadn71
- SHA256 092cbed5e6597c438fb81fa6b694fffacf347c6f21c1513d719c4846c5bd0825
- MD5 7195d73d27c0c92b66e228dccf1e764c
- SHA1 1b61ee4c8293792099da5e1bd4b9ac833e9bdd7e
- SHA512 d765e38060ed1f4b80905e9d0582208651ecfb7361d7721337704bdc663bb829689cb10361120abeeca37c327847cfc4b0a65b615e9456f5baffb907d7bec7bd
- SSDEEP 196608:64SOZN7clMnHp8w9c35WRD2yX2L8G8ksBn2lmIl0AUCW4nWd4DX1XyFkhF:ZZNdHRc3gpHwWPI/lvW4nWdw1wq
- TLSH T1459612D0B225F959E7650130992872A459662A303751D8EBBE8F36C259782D3FEF0F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_7195d73d27c0c92b66e228dccf1e764c_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_7195d73d27c0c92b66e228dccf1e764c_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_7195d73d27c0c92b66e228dccf1e764c_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- SHA256 092cbed5e6597c438fb81fa6b694fffacf347c6f21c1513d719c4846c5bd0825
- MD5 7195d73d27c0c92b66e228dccf1e764c
- SHA1 1b61ee4c8293792099da5e1bd4b9ac833e9bdd7e
- SHA512 d765e38060ed1f4b80905e9d0582208651ecfb7361d7721337704bdc663bb829689cb10361120abeeca37c327847cfc4b0a65b615e9456f5baffb907d7bec7bd
- SSDEEP 196608:64SOZN7clMnHp8w9c35WRD2yX2L8G8ksBn2lmIl0AUCW4nWd4DX1XyFkhF:ZZNdHRc3gpHwWPI/lvW4nWdw1wq
- TLSH T1459612D0B225F959E7650130992872A459662A303751D8EBBE8F36C259782D3FEF0F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.