General
- Target 2026-07-28_90c1f462fa902c022376eaab98f98d4a_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- Sample260728-2gb61acc33
- SHA256 91bb32e7cf3e669eceb635f2da89a7a8eea3e4d2d540849c95ee5251aab73e21
- MD5 90c1f462fa902c022376eaab98f98d4a
- SHA1 1a5ce7b8942e5ac10df27e00f1db02919e3f81a8
- SHA512 d7ba333165f88fde116a533b990cb520da034c738ec5c7560ffd5984513e3ebab5e44cc3ea42b4888fbfad567312a1d2713f7009857772f060ba2a40c2ab6269
- SSDEEP 196608:RuLdf0cwG3Ukcxd50tng3eLcvMG5k10qMHyXyFkhT:0dr8xd5ygOLcklaqMHyw0
- TLSH T1C6962290F265F469E3650031882876A4486A2E343751D9EBBE8F35C599782D3FEB0F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_90c1f462fa902c022376eaab98f98d4a_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_90c1f462fa902c022376eaab98f98d4a_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_90c1f462fa902c022376eaab98f98d4a_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- SHA256 91bb32e7cf3e669eceb635f2da89a7a8eea3e4d2d540849c95ee5251aab73e21
- MD5 90c1f462fa902c022376eaab98f98d4a
- SHA1 1a5ce7b8942e5ac10df27e00f1db02919e3f81a8
- SHA512 d7ba333165f88fde116a533b990cb520da034c738ec5c7560ffd5984513e3ebab5e44cc3ea42b4888fbfad567312a1d2713f7009857772f060ba2a40c2ab6269
- SSDEEP 196608:RuLdf0cwG3Ukcxd50tng3eLcvMG5k10qMHyXyFkhT:0dr8xd5ygOLcklaqMHyw0
- TLSH T1C6962290F265F469E3650031882876A4486A2E343751D9EBBE8F35C599782D3FEB0F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.