General
- Target 2026-08-19_6fde67085c574d7bd463e39b9fd5666f_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 4.2MB
- Sample260819-2mgcxaaa53
- SHA256 9940b0863a7186005c0c58da10b4525d526317eca9d084201896a11c4d840a4a
- MD5 6fde67085c574d7bd463e39b9fd5666f
- SHA1 a6d20fd47372a6804fc2cc6263a48330a4d2ef8c
- SHA512 fa4fcc3c03cb2f3613c5b682fb0faf24c7a5cb86d844e6dec4c04ae6d51ca348be4edc466b7d1c92db2677c33660a2d92c51c95d75583aeffd1f76cc5850565e
- SSDEEP 49152:rcZ4L6At8gMEB1eam1BJQoaUPa212gRd0LioaO2P3rdDB/c5KgGRQDYqILNiXico:TBoaSaEKiM2wKgsWi7wRGpj3
- TLSH T11B162B22F7520DB2C98340B0CD7A6B76CB5AEC780BF107B37772561EA4796C13525B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_6fde67085c574d7bd463e39b9fd5666f_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_6fde67085c574d7bd463e39b9fd5666f_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 4.2MB
- SHA256 9940b0863a7186005c0c58da10b4525d526317eca9d084201896a11c4d840a4a
- MD5 6fde67085c574d7bd463e39b9fd5666f
- SHA1 a6d20fd47372a6804fc2cc6263a48330a4d2ef8c
- SHA512 fa4fcc3c03cb2f3613c5b682fb0faf24c7a5cb86d844e6dec4c04ae6d51ca348be4edc466b7d1c92db2677c33660a2d92c51c95d75583aeffd1f76cc5850565e
- SSDEEP 49152:rcZ4L6At8gMEB1eam1BJQoaUPa212gRd0LioaO2P3rdDB/c5KgGRQDYqILNiXico:TBoaSaEKiM2wKgsWi7wRGpj3
- TLSH T11B162B22F7520DB2C98340B0CD7A6B76CB5AEC780BF107B37772561EA4796C13525B8A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1