General
- Target 2026-09-28_f8b8c768a0ad3a7b6e9b609e7734e567_amadey_darkgate_elex_luca-stealer_lynx_magniber_njrat
- Size 4.4MB
- Sample260928-mchews1ene
- SHA256 a8c2ae7dedd5da2510a37b4b218802ced03e95e63c89b3e5ff281f5cc37515b3
- MD5 f8b8c768a0ad3a7b6e9b609e7734e567
- SHA1 e42acbcb86841b4859712182144408f22dc65da7
- SHA512 eecd47ce0d74d34c866bf317ba814f1d3e0111dd62e8dba420c8bc2e03aff47d29ba45ab8b7a85cd0154d25e42e6780c8bd484af5d7958ae776fcdeef03efc13
- SSDEEP 98304:0lT05eybka9pbVu0VLGMb5Cx0taAUgLdpq+Xvna9k7VoiX996Kc2wfb9sxYbJzl+:0lTWj3pbVu0VLGMb5Cx0taAUgLdpq+X+
- TLSH T1B526D021BB4DC072E49503B146BE9FBB84686E35676101D7B2C87E6D19302D33B37A6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-09-28_f8b8c768a0ad3a7b6e9b609e7734e567_amadey_darkgate_elex_luca-stealer_lynx_magniber_njrat.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-28_f8b8c768a0ad3a7b6e9b609e7734e567_amadey_darkgate_elex_luca-stealer_lynx_magniber_njrat
- Size 4.4MB
- SHA256 a8c2ae7dedd5da2510a37b4b218802ced03e95e63c89b3e5ff281f5cc37515b3
- MD5 f8b8c768a0ad3a7b6e9b609e7734e567
- SHA1 e42acbcb86841b4859712182144408f22dc65da7
- SHA512 eecd47ce0d74d34c866bf317ba814f1d3e0111dd62e8dba420c8bc2e03aff47d29ba45ab8b7a85cd0154d25e42e6780c8bd484af5d7958ae776fcdeef03efc13
- SSDEEP 98304:0lT05eybka9pbVu0VLGMb5Cx0taAUgLdpq+Xvna9k7VoiX996Kc2wfb9sxYbJzl+:0lTWj3pbVu0VLGMb5Cx0taAUgLdpq+X+
- TLSH T1B526D021BB4DC072E49503B146BE9FBB84686E35676101D7B2C87E6D19302D33B37A6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1