General
- Target 2026-08-08_2aea6a15af48e84bbaf3f84e623042b1_amadey_darkgate_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- Sample260808-wprnrsbm61
- SHA256 9a0a4df4e343926248e01d884d3ae8f055c769aa984f038ca96fa555ae748dc9
- MD5 2aea6a15af48e84bbaf3f84e623042b1
- SHA1 fdd583a4e3ad24575263f450aa293cd5456aa40e
- SHA512 3ff711a9521e4077469bec7b40d7a86fd2719ea5ca6daebc06af74b4fb4fd1798b268227e5cf2ade6953ff1a2277336ffacbbb94000f3c680ef007c11a161996
- SSDEEP 196608:cVsOMrs4eqXdnFNaGi2HiVS+bDmymvSwtBjW0ATZCVZE1NRSEl9u:cVsOMrs4ecflWmym6Yt8ZHjg
- TLSH T109A612D073A9FA55DB590271403876F8861B22323B25D8EBBEC726CB1C585C6ADB1D33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_2aea6a15af48e84bbaf3f84e623042b1_amadey_darkgate_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_2aea6a15af48e84bbaf3f84e623042b1_amadey_darkgate_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_2aea6a15af48e84bbaf3f84e623042b1_amadey_darkgate_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- SHA256 9a0a4df4e343926248e01d884d3ae8f055c769aa984f038ca96fa555ae748dc9
- MD5 2aea6a15af48e84bbaf3f84e623042b1
- SHA1 fdd583a4e3ad24575263f450aa293cd5456aa40e
- SHA512 3ff711a9521e4077469bec7b40d7a86fd2719ea5ca6daebc06af74b4fb4fd1798b268227e5cf2ade6953ff1a2277336ffacbbb94000f3c680ef007c11a161996
- SSDEEP 196608:cVsOMrs4eqXdnFNaGi2HiVS+bDmymvSwtBjW0ATZCVZE1NRSEl9u:cVsOMrs4ecflWmym6Yt8ZHjg
- TLSH T109A612D073A9FA55DB590271403876F8861B22323B25D8EBBEC726CB1C585C6ADB1D33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE