General
- Target 2026-08-16_8163de68c3e1b6a2fc1ab245df06c2c3_amadey_darkgate_elex_luca-stealer_lynx_medusalocker_njrat
- Size 3.0MB
- Sample260816-h683gssdpc
- SHA256 9646da5f1a2e65708ecb19d6ebdca0d2a12761a309bbf9667d2868981c689d07
- MD5 8163de68c3e1b6a2fc1ab245df06c2c3
- SHA1 48037dc65ae30fa9e99729496b51cceacb310345
- SHA512 26885de94926a79c8548beb0c260d79d6b3673e29cd0aa0bed4e37a94f0d9a39e0b8a97f37f5d4acc8ef2e67e69fdb2dd13f556572130ab248fccdb4f94f077b
- SSDEEP 49152:OMofPlRU+QG/rOVcVz6StQyfvE0Z3R0nxiIq2dsTDwfC8D+rC9K159d9tq38/hL:OMsl6+QGjuTKtQRq2U8GC9KJdys/hL
- TLSH T1BDE5AE21B2D14125E5B3D630297EB7EA4B76BC256F35418F32D8B63C0B729C09D36B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_8163de68c3e1b6a2fc1ab245df06c2c3_amadey_darkgate_elex_luca-stealer_lynx_medusalocker_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_8163de68c3e1b6a2fc1ab245df06c2c3_amadey_darkgate_elex_luca-stealer_lynx_medusalocker_njrat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_8163de68c3e1b6a2fc1ab245df06c2c3_amadey_darkgate_elex_luca-stealer_lynx_medusalocker_njrat
- Size 3.0MB
- SHA256 9646da5f1a2e65708ecb19d6ebdca0d2a12761a309bbf9667d2868981c689d07
- MD5 8163de68c3e1b6a2fc1ab245df06c2c3
- SHA1 48037dc65ae30fa9e99729496b51cceacb310345
- SHA512 26885de94926a79c8548beb0c260d79d6b3673e29cd0aa0bed4e37a94f0d9a39e0b8a97f37f5d4acc8ef2e67e69fdb2dd13f556572130ab248fccdb4f94f077b
- SSDEEP 49152:OMofPlRU+QG/rOVcVz6StQyfvE0Z3R0nxiIq2dsTDwfC8D+rC9K159d9tq38/hL:OMsl6+QGjuTKtQRq2U8GC9KJdys/hL
- TLSH T1BDE5AE21B2D14125E5B3D630297EB7EA4B76BC256F35418F32D8B63C0B729C09D36B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.