General
- Target 2026-08-09_2ed4822e7b9b41a99b6fc9db38a2ae1f_amadey_darkgate_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.7MB
- Sample260809-r2ht6ssza1
- SHA256 673626382af9cbf1e4b84139595ce8d2825c4f4be7c00cf6f6c229b9bfdaed94
- MD5 2ed4822e7b9b41a99b6fc9db38a2ae1f
- SHA1 6fdcd0b4c2403167b46e8bf1d2bc20de89e93ded
- SHA512 2a6c848b7d38a83efb26cfe6b6a54979a878b92b4b6c0c736d62607e62e4b9ab7f9a50784746d0c09ecf8fc00c90a374e46135ba24fe16cea73c06eb64f1cfab
- SSDEEP 196608:fa+rnmM0QVOZvsQPJkKZcA4mcTLpln1Jhhl+oPpJqsl94:fb0QVKyVmcTlln1JQIbq4m
- TLSH T1FDA612C077A6FA55EB59023101387AB8462B25313715C8EFBE971BC76C582C6AEB1D33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_2ed4822e7b9b41a99b6fc9db38a2ae1f_amadey_darkgate_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_2ed4822e7b9b41a99b6fc9db38a2ae1f_amadey_darkgate_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_2ed4822e7b9b41a99b6fc9db38a2ae1f_amadey_darkgate_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.7MB
- SHA256 673626382af9cbf1e4b84139595ce8d2825c4f4be7c00cf6f6c229b9bfdaed94
- MD5 2ed4822e7b9b41a99b6fc9db38a2ae1f
- SHA1 6fdcd0b4c2403167b46e8bf1d2bc20de89e93ded
- SHA512 2a6c848b7d38a83efb26cfe6b6a54979a878b92b4b6c0c736d62607e62e4b9ab7f9a50784746d0c09ecf8fc00c90a374e46135ba24fe16cea73c06eb64f1cfab
- SSDEEP 196608:fa+rnmM0QVOZvsQPJkKZcA4mcTLpln1Jhhl+oPpJqsl94:fb0QVKyVmcTlln1JQIbq4m
- TLSH T1FDA612C077A6FA55EB59023101387AB8462B25313715C8EFBE971BC76C582C6AEB1D33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE