General
- Target 2026-08-24_1b20ba69d07c3d65565e63140bf22e7c_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat
- Size 2.0MB
- Sample260825-wk51laxbpd
- SHA256 3bed47baa7ac1759b028e976acf5471be189ca3dfd3d5d3597806ea9f6cd7491
- MD5 1b20ba69d07c3d65565e63140bf22e7c
- SHA1 087dcc150c290797a42b25b5bd5a1cb2ae746f1d
- SHA512 00675fea7a1e0462cb7c5dd6da29d4430adfd2cad3fd71b297a1088bc912505e57bb634b7d607059db88bdf992526b931dcd6c0acc7ec0ddb523a25d7b56e1b5
- SSDEEP 49152:NKKeMYeEAYOW1+M5A83M+svqia5B+kn3Hnx:YKPW1+M5NX+k
- TLSH T126A56B1177E95A29F1FB2B71AEB851604A7BBC615F31C7CF13801A5E2970AC09936B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_1b20ba69d07c3d65565e63140bf22e7c_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_1b20ba69d07c3d65565e63140bf22e7c_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_1b20ba69d07c3d65565e63140bf22e7c_amadey_avoslocker_darkgate_elex_luca-stealer_lynx_njrat
- Size 2.0MB
- SHA256 3bed47baa7ac1759b028e976acf5471be189ca3dfd3d5d3597806ea9f6cd7491
- MD5 1b20ba69d07c3d65565e63140bf22e7c
- SHA1 087dcc150c290797a42b25b5bd5a1cb2ae746f1d
- SHA512 00675fea7a1e0462cb7c5dd6da29d4430adfd2cad3fd71b297a1088bc912505e57bb634b7d607059db88bdf992526b931dcd6c0acc7ec0ddb523a25d7b56e1b5
- SSDEEP 49152:NKKeMYeEAYOW1+M5A83M+svqia5B+kn3Hnx:YKPW1+M5NX+k
- TLSH T126A56B1177E95A29F1FB2B71AEB851604A7BBC615F31C7CF13801A5E2970AC09936B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE