General
- Target 2026-08-04_3a22eb0b7e6f44f3a354b317564e91fa_amadey_darkgate_elex_luca-stealer_lynx_metamorfo_njrat
- Size 2.6MB
- Sample260804-jjbddaal2z
- SHA256 08fe98cfa8d31324c26ce99115d63368fb03586f2ce2179712f40ffbfb99a3d7
- MD5 3a22eb0b7e6f44f3a354b317564e91fa
- SHA1 1916ab999f48bee037b08d51e694ebdd837a36b5
- SHA512 5c2d400745a1c5ea625f299a39e7c16d0d7713efa04c018691213f8d567140233e23510a5bb87f2e493870e28b5318f87aff2b8336666128015a65d7c27def9e
- SSDEEP 49152:g1sCl64SkVTSiPpyZlWVrXPmFldgIYTwJzWegc3/kK5p6n3Jb5+Pl6bJTIZ5jdgp:gWCo4SkVJRgWVrXPmFldgIYTwJzWegcS
- TLSH T110C59D12F950DAEEC1130E33BB5CF379F1AFBB610A3D418752949A393D260439929D6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_3a22eb0b7e6f44f3a354b317564e91fa_amadey_darkgate_elex_luca-stealer_lynx_metamorfo_njrat.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_3a22eb0b7e6f44f3a354b317564e91fa_amadey_darkgate_elex_luca-stealer_lynx_metamorfo_njrat
- Size 2.6MB
- SHA256 08fe98cfa8d31324c26ce99115d63368fb03586f2ce2179712f40ffbfb99a3d7
- MD5 3a22eb0b7e6f44f3a354b317564e91fa
- SHA1 1916ab999f48bee037b08d51e694ebdd837a36b5
- SHA512 5c2d400745a1c5ea625f299a39e7c16d0d7713efa04c018691213f8d567140233e23510a5bb87f2e493870e28b5318f87aff2b8336666128015a65d7c27def9e
- SSDEEP 49152:g1sCl64SkVTSiPpyZlWVrXPmFldgIYTwJzWegc3/kK5p6n3Jb5+Pl6bJTIZ5jdgp:gWCo4SkVJRgWVrXPmFldgIYTwJzWegcS
- TLSH T110C59D12F950DAEEC1130E33BB5CF379F1AFBB610A3D418752949A393D260439929D6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1