General
- Target 2026-08-02_3bb2ea92b456471a37faad7784c1e6e8_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- Sample260802-ry6f3a1wht
- SHA256 cf2a311682db4db01db5b1ac5f70305ab39da6ac1fec150dd92833e54ee9ecf6
- MD5 3bb2ea92b456471a37faad7784c1e6e8
- SHA1 03598b1e7d2d86480388ea9db53ff8aecbb36312
- SHA512 7faab46e8a54caeeb4f3134a97431e201e88c8f005bb0a95709558f6abb75f0b8fc19444b3740fae76270db3a2252b5f1ee834a6bdcea14e94a3efaa20016b4a
- SSDEEP 196608:MilV2kAdQsoQwzK5YctIUgzprdtDG8NtpEiXyFkh7:TAkASslwGhtEhDGOZwM
- TLSH T1B79612D0F628F158E7A50231882466A819662E303755D9EBBE8F35C659382D3BDF0F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_3bb2ea92b456471a37faad7784c1e6e8_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_3bb2ea92b456471a37faad7784c1e6e8_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_3bb2ea92b456471a37faad7784c1e6e8_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- SHA256 cf2a311682db4db01db5b1ac5f70305ab39da6ac1fec150dd92833e54ee9ecf6
- MD5 3bb2ea92b456471a37faad7784c1e6e8
- SHA1 03598b1e7d2d86480388ea9db53ff8aecbb36312
- SHA512 7faab46e8a54caeeb4f3134a97431e201e88c8f005bb0a95709558f6abb75f0b8fc19444b3740fae76270db3a2252b5f1ee834a6bdcea14e94a3efaa20016b4a
- SSDEEP 196608:MilV2kAdQsoQwzK5YctIUgzprdtDG8NtpEiXyFkh7:TAkASslwGhtEhDGOZwM
- TLSH T1B79612D0F628F158E7A50231882466A819662E303755D9EBBE8F35C659382D3BDF0F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.