General
- Target 2026-08-02_25555a94b5eef600519e98b1832e2c7f_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- Sample260802-r4yneavfne
- SHA256 65e048ed089fc9cfb634e921ca3d744ed0b92861b14f73a4bcfc446f6a908319
- MD5 25555a94b5eef600519e98b1832e2c7f
- SHA1 b148a767965c43a8f7881876a10de4d066d0c5e1
- SHA512 255f46f880ec9176eff66c25959c7020b89df7ea0a0b959d5cdba4741d4cab2992b849e2d92fda7a3aa70836ee8f7762b87f2d9c16b7e0dbc0145c2ec8980719
- SSDEEP 196608:hZd97dDAeTC923CtdiZevHsDsrKKOP8soXyFkh+:J97V1W4Coe0D3uwd
- TLSH T1399612D1B625F119E7A10130882976B869662E303754E9EBBE8F35C158782D3BDB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_25555a94b5eef600519e98b1832e2c7f_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_25555a94b5eef600519e98b1832e2c7f_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_25555a94b5eef600519e98b1832e2c7f_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- SHA256 65e048ed089fc9cfb634e921ca3d744ed0b92861b14f73a4bcfc446f6a908319
- MD5 25555a94b5eef600519e98b1832e2c7f
- SHA1 b148a767965c43a8f7881876a10de4d066d0c5e1
- SHA512 255f46f880ec9176eff66c25959c7020b89df7ea0a0b959d5cdba4741d4cab2992b849e2d92fda7a3aa70836ee8f7762b87f2d9c16b7e0dbc0145c2ec8980719
- SSDEEP 196608:hZd97dDAeTC923CtdiZevHsDsrKKOP8soXyFkh+:J97V1W4Coe0D3uwd
- TLSH T1399612D1B625F119E7A10130882976B869662E303754E9EBBE8F35C158782D3BDB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.