General
- Target 2026-08-03_f1264a226d0133906dda43dadfcd8495_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 4.2MB
- Sample260803-fbcppaydpa
- SHA256 e3343ffa7b0113091abda366c1219fa8723b4f1a9f4e91801cd83d137c0ba859
- MD5 f1264a226d0133906dda43dadfcd8495
- SHA1 0cf62fed0a75a08a3806f8d9a04cbc2a5ed8913f
- SHA512 4075b29c5849d8ba16c94b5ef19e13342d3680a606a0d1e084b2ab6b4ebb2036740b4c9981e2feb5a3c105540d3366b2ab660ddf9e5eaf95a19105103198f39d
- SSDEEP 49152:yD7orKK5Rtb9WUs6X0qBalsqf56kgXdWCyGnPPUP3LUB/c5KgGRQTVwoqjLNiXif:zzBamqEYGXUzKgsmVwZ7wRGpj3
- TLSH T17C162B22F7520DB2C99340B0CD7A6B76CB5AEC780BF107B37B72561EA4792C13525B4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_f1264a226d0133906dda43dadfcd8495_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_f1264a226d0133906dda43dadfcd8495_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 4.2MB
- SHA256 e3343ffa7b0113091abda366c1219fa8723b4f1a9f4e91801cd83d137c0ba859
- MD5 f1264a226d0133906dda43dadfcd8495
- SHA1 0cf62fed0a75a08a3806f8d9a04cbc2a5ed8913f
- SHA512 4075b29c5849d8ba16c94b5ef19e13342d3680a606a0d1e084b2ab6b4ebb2036740b4c9981e2feb5a3c105540d3366b2ab660ddf9e5eaf95a19105103198f39d
- SSDEEP 49152:yD7orKK5Rtb9WUs6X0qBalsqf56kgXdWCyGnPPUP3LUB/c5KgGRQTVwoqjLNiXif:zzBamqEYGXUzKgsmVwZ7wRGpj3
- TLSH T17C162B22F7520DB2C99340B0CD7A6B76CB5AEC780BF107B37B72561EA4792C13525B4A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1