General
- Target 2026-07-29_d93fb1f51b9e02d321d1c49cad7b4bca_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- Sample260729-sk6eksyva1
- SHA256 bcd3285a16954c94bb28985b04abc362a36c58d8aed7d7d69f6bda2bac731aba
- MD5 d93fb1f51b9e02d321d1c49cad7b4bca
- SHA1 a90e10f8f68fda26446e31e48e175e5d1955342d
- SHA512 05817dc4b81e80e50d1ae47de5a9234fdb7b31832a8866ee18073f87215ef62f26e48c955e3003d1f44d81d1ac46f9e18628d1f1618d1237031bfdca356064ba
- SSDEEP 196608:2VLGiJvWcVKSBzMw/OdazGZ/RVFFw9TXZ0hXyFkhf:iaPcrzMwrE/5Fw9TJ8wk
- TLSH T1069612D0F624F958E3640130493976A459662A303755E9ABFE8F3AC149392D3BEB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_d93fb1f51b9e02d321d1c49cad7b4bca_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_d93fb1f51b9e02d321d1c49cad7b4bca_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_d93fb1f51b9e02d321d1c49cad7b4bca_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- SHA256 bcd3285a16954c94bb28985b04abc362a36c58d8aed7d7d69f6bda2bac731aba
- MD5 d93fb1f51b9e02d321d1c49cad7b4bca
- SHA1 a90e10f8f68fda26446e31e48e175e5d1955342d
- SHA512 05817dc4b81e80e50d1ae47de5a9234fdb7b31832a8866ee18073f87215ef62f26e48c955e3003d1f44d81d1ac46f9e18628d1f1618d1237031bfdca356064ba
- SSDEEP 196608:2VLGiJvWcVKSBzMw/OdazGZ/RVFFw9TXZ0hXyFkhf:iaPcrzMwrE/5Fw9TJ8wk
- TLSH T1069612D0F624F958E3640130493976A459662A303755E9ABFE8F3AC149392D3BEB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.