General
- Target 2026-08-16_efe32b500d9a29364b7879babcbf53ee_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- Sample260816-tz1nbasama
- SHA256 91190c29829ac97ca88fde682a4d8e336d64801d068305c82cc823a9d9f1a8f1
- MD5 efe32b500d9a29364b7879babcbf53ee
- SHA1 a23548fcb6d299b779f0224ce2d15df37a2e7958
- SHA512 bc76422bcc83622542447c9ed4b808ab560a578c0d17838dd563a0fae80a73abd7db024bbba34d045029ae2578cbc20e26c106f019039247e50eaec8a3663ec0
- SSDEEP 196608:9+e0Cg3xOEARsxNSLhPnOxVlJvlH0CWL+FgliKbSUXyFkhP:cq5eNSLhPnOhJvx0C2ckxw8
- TLSH T1119612D0B221F558E3610130893976A019661E343741E9EBBE8F39D298796D3EEB5F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_efe32b500d9a29364b7879babcbf53ee_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_efe32b500d9a29364b7879babcbf53ee_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_efe32b500d9a29364b7879babcbf53ee_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- SHA256 91190c29829ac97ca88fde682a4d8e336d64801d068305c82cc823a9d9f1a8f1
- MD5 efe32b500d9a29364b7879babcbf53ee
- SHA1 a23548fcb6d299b779f0224ce2d15df37a2e7958
- SHA512 bc76422bcc83622542447c9ed4b808ab560a578c0d17838dd563a0fae80a73abd7db024bbba34d045029ae2578cbc20e26c106f019039247e50eaec8a3663ec0
- SSDEEP 196608:9+e0Cg3xOEARsxNSLhPnOxVlJvlH0CWL+FgliKbSUXyFkhP:cq5eNSLhPnOhJvx0C2ckxw8
- TLSH T1119612D0B221F558E3610130893976A019661E343741E9EBBE8F39D298796D3EEB5F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.