General
- Target 2026-08-19_2f5263c3a09562d6aaf5e8a387abfd30_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- Sample260819-s85sysxeqa
- SHA256 80b5510b8b05a3f0102ec9dc516e94ae0fca44c13ca87d81681a5bd6f7703971
- MD5 2f5263c3a09562d6aaf5e8a387abfd30
- SHA1 e575d3603c2317dcf9c1b0f0b9487ee8e8542411
- SHA512 77b81139bb299c0f44a1f37ea74fdb09d15f9722fdd63b185b67b362ee824dfaad92fcf97bfd5a901f85f57e9d5987570a3f7808288b4ea07a090f7d5013e473
- SSDEEP 196608:oJSzBFYeAdiYIxR7piDoFrwF30QfhdOXyFkhf:hnoiYIHQDoq93Ows
- TLSH T1F89622D1F221F505E765013189286AB4487A2E303750D9E7FE8F76D299782D2AEB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_2f5263c3a09562d6aaf5e8a387abfd30_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_2f5263c3a09562d6aaf5e8a387abfd30_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_2f5263c3a09562d6aaf5e8a387abfd30_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- SHA256 80b5510b8b05a3f0102ec9dc516e94ae0fca44c13ca87d81681a5bd6f7703971
- MD5 2f5263c3a09562d6aaf5e8a387abfd30
- SHA1 e575d3603c2317dcf9c1b0f0b9487ee8e8542411
- SHA512 77b81139bb299c0f44a1f37ea74fdb09d15f9722fdd63b185b67b362ee824dfaad92fcf97bfd5a901f85f57e9d5987570a3f7808288b4ea07a090f7d5013e473
- SSDEEP 196608:oJSzBFYeAdiYIxR7piDoFrwF30QfhdOXyFkhf:hnoiYIHQDoq93Ows
- TLSH T1F89622D1F221F505E765013189286AB4487A2E303750D9E7FE8F76D299782D2AEB1F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.