General
- Target 2026-08-16_791a2191cf68b26a687d1d21de703675_amadey_darkgate_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- Sample260816-h91khsfl6w
- SHA256 e027188876ae6cfcd6b2dbd4be68e293d6812e306ca6a5f592bce8f588d10c36
- MD5 791a2191cf68b26a687d1d21de703675
- SHA1 5cf170c7120a35e46906bf1acc342fd4f50ffb50
- SHA512 f58866b067766bdceca7412c76fe22c009afd458e28558eb34eba9adadf8da218d1b5a0cafac2d778ab1a7e28d5f072e2af58b967f30e8507be1405897229a59
- SSDEEP 196608:nkIUN5YxdlzPFIRIDpcYkGKBO0jrfSDGO6QmfcAeF/kZxYcUvd07Pdq+l9/:nkIUN5anzNuecQYRff5tb0AepWxoVgjl
- TLSH T1A4A612C07366F665DB59023140387AF9566B21323B10D8EBBE971AC36D586C6AEF0D33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_791a2191cf68b26a687d1d21de703675_amadey_darkgate_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_791a2191cf68b26a687d1d21de703675_amadey_darkgate_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_791a2191cf68b26a687d1d21de703675_amadey_darkgate_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.8MB
- SHA256 e027188876ae6cfcd6b2dbd4be68e293d6812e306ca6a5f592bce8f588d10c36
- MD5 791a2191cf68b26a687d1d21de703675
- SHA1 5cf170c7120a35e46906bf1acc342fd4f50ffb50
- SHA512 f58866b067766bdceca7412c76fe22c009afd458e28558eb34eba9adadf8da218d1b5a0cafac2d778ab1a7e28d5f072e2af58b967f30e8507be1405897229a59
- SSDEEP 196608:nkIUN5YxdlzPFIRIDpcYkGKBO0jrfSDGO6QmfcAeF/kZxYcUvd07Pdq+l9/:nkIUN5anzNuecQYRff5tb0AepWxoVgjl
- TLSH T1A4A612C07366F665DB59023140387AF9566B21323B10D8EBBE971AC36D586C6AEF0D33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE