General
- Target 2026-10-10_a40d53bb5cf3d20b75accea912dfc394_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 2.0MB
- Sample261011-hcprradb84
- SHA256 0f7dd14128b1816e2befbe3001360c52dcd48fb5efc6782eeb1b0ac82835584d
- MD5 a40d53bb5cf3d20b75accea912dfc394
- SHA1 1c6b65f868a90e593d1b8ed2dba90ed28a03de15
- SHA512 1f6f985fda344a60bea03f8d95fcb219d5f499477375a189857e95e5a612199e4d4b0133f005c7c155e3ea3cbd3bde295efee69bffcf4b88f53c14ed1a2152d4
- SSDEEP 49152:nfb4J+XM8VRXc9WsoN/j2U4FHpVsWJe+Zs6GFL:n0J+XM8V2bUj2jFvsy4
- TLSH T10CA50127B5A1C03BC17909711E5973A126EDBD29892ED3A72A9433BD1F789F00E27533
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-10_a40d53bb5cf3d20b75accea912dfc394_amadey_darkgate_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_a40d53bb5cf3d20b75accea912dfc394_amadey_darkgate_elex_luca-stealer_lynx_njrat
- Size 2.0MB
- SHA256 0f7dd14128b1816e2befbe3001360c52dcd48fb5efc6782eeb1b0ac82835584d
- MD5 a40d53bb5cf3d20b75accea912dfc394
- SHA1 1c6b65f868a90e593d1b8ed2dba90ed28a03de15
- SHA512 1f6f985fda344a60bea03f8d95fcb219d5f499477375a189857e95e5a612199e4d4b0133f005c7c155e3ea3cbd3bde295efee69bffcf4b88f53c14ed1a2152d4
- SSDEEP 49152:nfb4J+XM8VRXc9WsoN/j2U4FHpVsWJe+Zs6GFL:n0J+XM8V2bUj2jFvsy4
- TLSH T10CA50127B5A1C03BC17909711E5973A126EDBD29892ED3A72A9433BD1F789F00E27533
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1