General
- Target 2026-08-18_1d551dcb39b32eae120b0fe696d98ab3_amadey_darkgate_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.9MB
- Sample260818-w4l2tsybkf
- SHA256 eb667796f5bb8f1a70f92a21631cfc006fbf339624864ce7be1264c003d06934
- MD5 1d551dcb39b32eae120b0fe696d98ab3
- SHA1 a08b5fe8d5dd967326afdf6496a0f2e4c36c2c69
- SHA512 c161d8f32629d422e288652254aae27222f5d964731ca0b4b04958a42ac454a06ca9e5e9a7dabec3f9df6b0fe60fd410bca87d8662f22b35f8a0e7e928ec8356
- SSDEEP 196608:dPchqE7p/T8ymDDjMR1e2Mp3g0gVkWH0qKqNS2kxZNl90:1cIEZIrMRQ2Mp3g/Vx7S3P76
- TLSH T101B601C0776AFA55DB59023104387AB8966722313B21C9FBBE8716D35D582C6AEF0D33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_1d551dcb39b32eae120b0fe696d98ab3_amadey_darkgate_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_1d551dcb39b32eae120b0fe696d98ab3_amadey_darkgate_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_1d551dcb39b32eae120b0fe696d98ab3_amadey_darkgate_dragonforce_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 9.9MB
- SHA256 eb667796f5bb8f1a70f92a21631cfc006fbf339624864ce7be1264c003d06934
- MD5 1d551dcb39b32eae120b0fe696d98ab3
- SHA1 a08b5fe8d5dd967326afdf6496a0f2e4c36c2c69
- SHA512 c161d8f32629d422e288652254aae27222f5d964731ca0b4b04958a42ac454a06ca9e5e9a7dabec3f9df6b0fe60fd410bca87d8662f22b35f8a0e7e928ec8356
- SSDEEP 196608:dPchqE7p/T8ymDDjMR1e2Mp3g0gVkWH0qKqNS2kxZNl90:1cIEZIrMRQ2Mp3g/Vx7S3P76
- TLSH T101B601C0776AFA55DB59023104387AB8966722313B21C9FBBE8716D35D582C6AEF0D33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE