General
- Target 2026-07-27_76d5d30cd41d9993b7392f6bd06a8bb6_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- Sample260727-nflgds1bnb
- SHA256 24156d44c8ba01db923b87188f9856fc34810a50d9cd75b5c9c83598f10d15c2
- MD5 76d5d30cd41d9993b7392f6bd06a8bb6
- SHA1 dab785d253d391a349a57357b3a987f075482e81
- SHA512 2f5cbb68b747027a0b6f459a44be89190614057d6e9c7efe85fa6d446ba28170d735b4fff1384ac14d98c69f3de0f8cc471ee88974442cff41469c1c0dba9928
- SSDEEP 196608:0mvIswISuteaYChy4xJ/VWnXtrINYeW5Ge5K3mcNlNr0LacNXyFkhq:pvNwhazttaXtUwMWCrqNwN
- TLSH T1029612D0F224F169E7650131482876B458662A303345D9EBFE8F3AD259682D3BEB5F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_76d5d30cd41d9993b7392f6bd06a8bb6_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_76d5d30cd41d9993b7392f6bd06a8bb6_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_76d5d30cd41d9993b7392f6bd06a8bb6_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- SHA256 24156d44c8ba01db923b87188f9856fc34810a50d9cd75b5c9c83598f10d15c2
- MD5 76d5d30cd41d9993b7392f6bd06a8bb6
- SHA1 dab785d253d391a349a57357b3a987f075482e81
- SHA512 2f5cbb68b747027a0b6f459a44be89190614057d6e9c7efe85fa6d446ba28170d735b4fff1384ac14d98c69f3de0f8cc471ee88974442cff41469c1c0dba9928
- SSDEEP 196608:0mvIswISuteaYChy4xJ/VWnXtrINYeW5Ge5K3mcNlNr0LacNXyFkhq:pvNwhazttaXtUwMWCrqNwN
- TLSH T1029612D0F224F169E7650131482876B458662A303345D9EBFE8F3AD259682D3BEB5F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.