General
- Target 2026-07-28_960e3b508716750f47ca25508f18a147_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- Sample260728-p4dbcsxarf
- SHA256 925f3e6ad7bfbf52f13aa1a7fdacf58674de8bfa31c8069f3326aee8cba18f26
- MD5 960e3b508716750f47ca25508f18a147
- SHA1 a167b9e6aeddfad112b3ea58981f1609c4bf4fab
- SHA512 49914472811834c1a094542afc62a7a647906eba0a653bb9477fd7586351959111fce9cd5f4632e77edd19de1ab2ea3f247a218db34d755f81fa535332b288f8
- SSDEEP 196608:iZXybOcpAEhyO6Xd6Q1R+37nPnFKdKcpOz3ZFrbcZnUGKzxXyFkhW:YX4OC3MO6N605dK2ObIexwZ
- TLSH T1D69612D0B225F519E7A5017088247664192A1E303745E9EBFF8E3AD149782E3BEB5F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_960e3b508716750f47ca25508f18a147_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_960e3b508716750f47ca25508f18a147_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_960e3b508716750f47ca25508f18a147_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- SHA256 925f3e6ad7bfbf52f13aa1a7fdacf58674de8bfa31c8069f3326aee8cba18f26
- MD5 960e3b508716750f47ca25508f18a147
- SHA1 a167b9e6aeddfad112b3ea58981f1609c4bf4fab
- SHA512 49914472811834c1a094542afc62a7a647906eba0a653bb9477fd7586351959111fce9cd5f4632e77edd19de1ab2ea3f247a218db34d755f81fa535332b288f8
- SSDEEP 196608:iZXybOcpAEhyO6Xd6Q1R+37nPnFKdKcpOz3ZFrbcZnUGKzxXyFkhW:YX4OC3MO6N605dK2ObIexwZ
- TLSH T1D69612D0B225F519E7A5017088247664192A1E303745E9EBFF8E3AD149782E3BEB5F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.