General
- Target 2026-08-19_77515760682c3e74ab85182b3f2d89c3_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 7.6MB
- Sample260819-f3ctrsej51
- SHA256 c94e22f532dd995d3c035b7ec78b7fda337a42be8305d85994882c3448d26433
- MD5 77515760682c3e74ab85182b3f2d89c3
- SHA1 f712b368da79c4fa6507442885ee7e96a4b980a5
- SHA512 da6bdc657ea41626558c640a584e0c69bd3ba364f43a6592ba1ce9386edebb8fdef1b865f07cc3c08c70a2d3098bd73620766a243168405f160d5101281139aa
- SSDEEP 98304:kQcqXHwbQflr25utDhueRygvRzH7zGWBQhqrsF6ZiArbKKYlVRaBp2corGYftCxd:kRqRDhuRcZzGWc7Y/sVROoKytCx1Rl9B
- TLSH T18B8601C0B354F818EB49067058356AF8466A25313324D9EFFE9F76C229582E5ADF0E37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_77515760682c3e74ab85182b3f2d89c3_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_77515760682c3e74ab85182b3f2d89c3_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_77515760682c3e74ab85182b3f2d89c3_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 7.6MB
- SHA256 c94e22f532dd995d3c035b7ec78b7fda337a42be8305d85994882c3448d26433
- MD5 77515760682c3e74ab85182b3f2d89c3
- SHA1 f712b368da79c4fa6507442885ee7e96a4b980a5
- SHA512 da6bdc657ea41626558c640a584e0c69bd3ba364f43a6592ba1ce9386edebb8fdef1b865f07cc3c08c70a2d3098bd73620766a243168405f160d5101281139aa
- SSDEEP 98304:kQcqXHwbQflr25utDhueRygvRzH7zGWBQhqrsF6ZiArbKKYlVRaBp2corGYftCxd:kRqRDhuRcZzGWc7Y/sVROoKytCx1Rl9B
- TLSH T18B8601C0B354F818EB49067058356AF8466A25313324D9EFFE9F76C229582E5ADF0E37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE