General
- Target 2026-07-28_126fdac167f432657ac00decf98db266_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- Sample260728-qdpgdahd76
- SHA256 e4c60d29cb8e4f41b97959f5931785837115f83898999d5e18a1cc4546217378
- MD5 126fdac167f432657ac00decf98db266
- SHA1 0b6ceafffb460577f8560d6486258588716f5a4d
- SHA512 e07308b7c458b7bc42e1ff8acae175a9ea853faec2c1a3130896bee95c17cd2879b3654a88cd05148f66ae857a4d7af719ce7b62d853e90f3639294a62e192b2
- SSDEEP 196608:TOQpXDnxTu7J6uoyw7yBCDhoJM87zpXnCIXyFkhv:Bzndc6uPiyBOoJM87dXCIww
- TLSH T15D962290F225F459E7A50130882576B419662E303B55D9EBFE8F36D219382D3AEB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_126fdac167f432657ac00decf98db266_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_126fdac167f432657ac00decf98db266_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_126fdac167f432657ac00decf98db266_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- SHA256 e4c60d29cb8e4f41b97959f5931785837115f83898999d5e18a1cc4546217378
- MD5 126fdac167f432657ac00decf98db266
- SHA1 0b6ceafffb460577f8560d6486258588716f5a4d
- SHA512 e07308b7c458b7bc42e1ff8acae175a9ea853faec2c1a3130896bee95c17cd2879b3654a88cd05148f66ae857a4d7af719ce7b62d853e90f3639294a62e192b2
- SSDEEP 196608:TOQpXDnxTu7J6uoyw7yBCDhoJM87zpXnCIXyFkhv:Bzndc6uPiyBOoJM87dXCIww
- TLSH T15D962290F225F459E7A50130882576B419662E303B55D9EBFE8F36D219382D3AEB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.