General
- Target 2026-07-28_65f4d07abb8cfe4fa1e8227a92b69046_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- Sample260728-xc4m8svthy
- SHA256 ffa8c9d92089b13bbc2649daaead92cb39aefaea36533ae99edf20fbcc33c3ff
- MD5 65f4d07abb8cfe4fa1e8227a92b69046
- SHA1 cf07fb44505186fb56ef1a3871c50a3325ce2c41
- SHA512 5be32c052899c1ad22fcda1c7a835ad5c30bcd0b7c894c872f0cbf8a0458eb1ea5c0229544d0662043594f0eff987cb2a348229bf627eb3162d5067042065cf9
- SSDEEP 196608:N3g0Qv2GAaKr2KITfPtfvHRiLXczikKIxDHV0oXyFkhFBJ:pEO1r2hRKgiK1VfwEBJ
- TLSH T1159612C5F224F518E3A50030982876A459662D303B55D9E7BE8F3AD249742E3AEF1F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_65f4d07abb8cfe4fa1e8227a92b69046_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_65f4d07abb8cfe4fa1e8227a92b69046_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_65f4d07abb8cfe4fa1e8227a92b69046_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- SHA256 ffa8c9d92089b13bbc2649daaead92cb39aefaea36533ae99edf20fbcc33c3ff
- MD5 65f4d07abb8cfe4fa1e8227a92b69046
- SHA1 cf07fb44505186fb56ef1a3871c50a3325ce2c41
- SHA512 5be32c052899c1ad22fcda1c7a835ad5c30bcd0b7c894c872f0cbf8a0458eb1ea5c0229544d0662043594f0eff987cb2a348229bf627eb3162d5067042065cf9
- SSDEEP 196608:N3g0Qv2GAaKr2KITfPtfvHRiLXczikKIxDHV0oXyFkhFBJ:pEO1r2hRKgiK1VfwEBJ
- TLSH T1159612C5F224F518E3A50030982876A459662D303B55D9E7BE8F3AD249742E3AEF1F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.