General
- Target 2026-07-27_c8fbe01988337b9691af630dfa685992_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- Sample260727-rj57ravajd
- SHA256 dd5b6ba103affdf66bc51ed7fd638bb5fafca1b312ede288cfc567e35b3953fc
- MD5 c8fbe01988337b9691af630dfa685992
- SHA1 80882c28437eb565d73ff555a8b287bed34f6368
- SHA512 3c685d680ca285d5727eb94a5d73d172bcd7b2a7a88d5ef269609de53cf218da6ef10bf783361656aaf5a0b8d9bf6d5b05667d95954242a7a2ec0a776a2dd163
- SSDEEP 196608:DOBdyQb/clDztCTTo46cExRfZmGMowjFd8flAXyFkhc:uJQ/nrfZhC89AwX
- TLSH T16D9612C1F224F658E7A00171982476A459661E303795D8ABFE8F36D649382D3AEF4F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_c8fbe01988337b9691af630dfa685992_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_c8fbe01988337b9691af630dfa685992_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_c8fbe01988337b9691af630dfa685992_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- SHA256 dd5b6ba103affdf66bc51ed7fd638bb5fafca1b312ede288cfc567e35b3953fc
- MD5 c8fbe01988337b9691af630dfa685992
- SHA1 80882c28437eb565d73ff555a8b287bed34f6368
- SHA512 3c685d680ca285d5727eb94a5d73d172bcd7b2a7a88d5ef269609de53cf218da6ef10bf783361656aaf5a0b8d9bf6d5b05667d95954242a7a2ec0a776a2dd163
- SSDEEP 196608:DOBdyQb/clDztCTTo46cExRfZmGMowjFd8flAXyFkhc:uJQ/nrfZhC89AwX
- TLSH T16D9612C1F224F658E7A00171982476A459661E303795D8ABFE8F36D649382D3AEF4F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.