General
- Target 2026-08-03_7b1c5f581ae6a5322aac2bc765a61169_amadey_darkgate_elex_luca-stealer_lynx_magniber_njrat
- Size 3.3MB
- Sample260804-navswaab32
- SHA256 54cb624ab8f4e4b2253d484dc10ed3f8db44232c0da53ecd9aa3663e03dce0a0
- MD5 7b1c5f581ae6a5322aac2bc765a61169
- SHA1 4d0d6ac776803439cc17ec35a800bef158e85a98
- SHA512 7c7b0b37fa602f71d4974fa71d00c624aaef2abdb3631a559a5a6ffb962ba7c3c31666e7d43dcc3a1d62dae29d4a678c4d3cc9a85de7aabf00d2dc7bb0527d61
- SSDEEP 49152:3ZBATAK7IjnDreNwL934vskEuJUNFiAceq58uCiqHUzj23P2vDmg27RnWGj:3ZuTWDreQkEuJURmGjipD527BWG
- TLSH T148F5AF317701C4B6D95202B0ADBDEA5F816DBE218F7414C7B3D82F6E55B19C21B32A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_7b1c5f581ae6a5322aac2bc765a61169_amadey_darkgate_elex_luca-stealer_lynx_magniber_njrat.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_7b1c5f581ae6a5322aac2bc765a61169_amadey_darkgate_elex_luca-stealer_lynx_magniber_njrat
- Size 3.3MB
- SHA256 54cb624ab8f4e4b2253d484dc10ed3f8db44232c0da53ecd9aa3663e03dce0a0
- MD5 7b1c5f581ae6a5322aac2bc765a61169
- SHA1 4d0d6ac776803439cc17ec35a800bef158e85a98
- SHA512 7c7b0b37fa602f71d4974fa71d00c624aaef2abdb3631a559a5a6ffb962ba7c3c31666e7d43dcc3a1d62dae29d4a678c4d3cc9a85de7aabf00d2dc7bb0527d61
- SSDEEP 49152:3ZBATAK7IjnDreNwL934vskEuJUNFiAceq58uCiqHUzj23P2vDmg27RnWGj:3ZuTWDreQkEuJURmGjipD527BWG
- TLSH T148F5AF317701C4B6D95202B0ADBDEA5F816DBE218F7414C7B3D82F6E55B19C21B32A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1