General
- Target 2026-08-19_31627bf28379ab3c70035e1290b9fec7_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- Sample260819-y6jetshm91
- SHA256 49897e7d3d1d43998fb926f8a0832ec1c41114ff31641211faa19711f57ffc54
- MD5 31627bf28379ab3c70035e1290b9fec7
- SHA1 b476dca769cab01bb1cf3bdb700bd6feec4ddc41
- SHA512 ee208fac695379c28ebe6df55f39201c6ff760780630212f688fea0f29de66cf40de95eb0c0bdf94806e7dd0369e41d6eb48cd3572f65a751b3a593b2f42e26c
- SSDEEP 196608:LekdHudobf0pUJkaTY++yTVii0PTzL0dUqwNURGOfuHJA4HXyFkhg:CoHMobfUUJhv+yxNkTslsPpA6wj
- TLSH T1359612D1B224F569E3A50530883876A455A62A313795D9EBFE8F39C149382D3BDB0F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_31627bf28379ab3c70035e1290b9fec7_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_31627bf28379ab3c70035e1290b9fec7_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_31627bf28379ab3c70035e1290b9fec7_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 8.4MB
- SHA256 49897e7d3d1d43998fb926f8a0832ec1c41114ff31641211faa19711f57ffc54
- MD5 31627bf28379ab3c70035e1290b9fec7
- SHA1 b476dca769cab01bb1cf3bdb700bd6feec4ddc41
- SHA512 ee208fac695379c28ebe6df55f39201c6ff760780630212f688fea0f29de66cf40de95eb0c0bdf94806e7dd0369e41d6eb48cd3572f65a751b3a593b2f42e26c
- SSDEEP 196608:LekdHudobf0pUJkaTY++yTVii0PTzL0dUqwNURGOfuHJA4HXyFkhg:CoHMobfUUJhv+yxNkTslsPpA6wj
- TLSH T1359612D1B224F569E3A50530883876A455A62A313795D9EBFE8F39C149382D3BDB0F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.