General
- Target 2026-07-28_f9a26a5b942bc360ac6a8ca1ee6d4c89_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- Sample260729-ab4khscl9w
- SHA256 7b12b816161328548ba859bb94683b6207c4da2ac6abac0df16361054e0a960a
- MD5 f9a26a5b942bc360ac6a8ca1ee6d4c89
- SHA1 4caf37689eec36c7e7d028d56ffaa449781ce00f
- SHA512 c00a90c38b63e56066c89ccaca018ac21564f2bc6ad48362551c5b32f7ce27ca2113b79bb78254aeb63d24233c8cc1c89d39a32410cde19d62438a4bf9a5dccc
- SSDEEP 196608:q/kiKpXqv3v2gEDnOm2A8cWq/E/V93Q3No5kAvodCu3mtGcXyFkhs:RpXM3v2F4V93Q3No5kAvohBcwT
- TLSH T1DE9622D1F225F159E3650131882866A859A61D303781D8EBFE8F3AD548395E3BEB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_f9a26a5b942bc360ac6a8ca1ee6d4c89_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_f9a26a5b942bc360ac6a8ca1ee6d4c89_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_f9a26a5b942bc360ac6a8ca1ee6d4c89_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- SHA256 7b12b816161328548ba859bb94683b6207c4da2ac6abac0df16361054e0a960a
- MD5 f9a26a5b942bc360ac6a8ca1ee6d4c89
- SHA1 4caf37689eec36c7e7d028d56ffaa449781ce00f
- SHA512 c00a90c38b63e56066c89ccaca018ac21564f2bc6ad48362551c5b32f7ce27ca2113b79bb78254aeb63d24233c8cc1c89d39a32410cde19d62438a4bf9a5dccc
- SSDEEP 196608:q/kiKpXqv3v2gEDnOm2A8cWq/E/V93Q3No5kAvodCu3mtGcXyFkhs:RpXM3v2F4V93Q3No5kAvohBcwT
- TLSH T1DE9622D1F225F159E3650131882866A859A61D303781D8EBFE8F3AD548395E3BEB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.