General
- Target 2026-08-03_fe582287b05e28654f06de30cb5169dc_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 1.3MB
- Sample260804-kpcn3abm7x
- SHA256 cefc8ebb216a2681afc82109a6a92a2c2b9db48a227af8b32ddcf37ae420cae3
- MD5 fe582287b05e28654f06de30cb5169dc
- SHA1 514488bc9aadba7b120d0f0657bfd8ae6310afc7
- SHA512 2b63009bc80ce563d3a3a3e2c29252e7e48c7fc920da42e76c5bd373d83704b514c9e7878f7de4fbe78739eb4d933a72f3b0441df823df5da30435d1a857ab96
- SSDEEP 24576:Hw//LhT0U+G0rziLcsKEK96xh6ok0WmTXwT9eTK0B:Q1T03zA4Ah610/TAT9eW4
- TLSH T15755AE21B552C172D9F1417099FDEFAB943EA9344B7904C7A3C44F2D5B212C26F3AA2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-03_fe582287b05e28654f06de30cb5169dc_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_fe582287b05e28654f06de30cb5169dc_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_fe582287b05e28654f06de30cb5169dc_amadey_darkgate_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 1.3MB
- SHA256 cefc8ebb216a2681afc82109a6a92a2c2b9db48a227af8b32ddcf37ae420cae3
- MD5 fe582287b05e28654f06de30cb5169dc
- SHA1 514488bc9aadba7b120d0f0657bfd8ae6310afc7
- SHA512 2b63009bc80ce563d3a3a3e2c29252e7e48c7fc920da42e76c5bd373d83704b514c9e7878f7de4fbe78739eb4d933a72f3b0441df823df5da30435d1a857ab96
- SSDEEP 24576:Hw//LhT0U+G0rziLcsKEK96xh6ok0WmTXwT9eTK0B:Q1T03zA4Ah610/TAT9eW4
- TLSH T15755AE21B552C172D9F1417099FDEFAB943EA9344B7904C7A3C44F2D5B212C26F3AA2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.