General
- Target 2026-10-13_39da13dc57d1bccf4cc20e3ebe059d32_amadey_darkgate_elex_luca-stealer_lynx_magniber_njrat
- Size 3.3MB
- Sample261015-tb268sysfs
- SHA256 fe59d732175592d1248dbbaf89af196ede178e48bd32703943fcb785791df16c
- MD5 39da13dc57d1bccf4cc20e3ebe059d32
- SHA1 0e8ba59568d4b97839ab5b9f87efa52be80cc620
- SHA512 f980465b9192d0eb347f3a5e24571eb38bb4db7bdcff16a647d4f5683d4d511e4907e8ff4abab624b16da842be8c88c1c1cdf01e78313abbbb15a6a6f85ca927
- SSDEEP 49152:ZZUATAK7IjnDreNwL934vsDEuJUNliAceq58uCiqHUzj23P2Ph0jpIMlXn:ZZ/TWDreQDEuJU9mGjij61
- TLSH T194F5AF317701C4B6D95202B0ADBDEA5F816DBD218F7414C7B3D82F6E55B19C22B32A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-13_39da13dc57d1bccf4cc20e3ebe059d32_amadey_darkgate_elex_luca-stealer_lynx_magniber_njrat.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-13_39da13dc57d1bccf4cc20e3ebe059d32_amadey_darkgate_elex_luca-stealer_lynx_magniber_njrat.exe
Resource
win11ltsc2024-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_39da13dc57d1bccf4cc20e3ebe059d32_amadey_darkgate_elex_luca-stealer_lynx_magniber_njrat
- Size 3.3MB
- SHA256 fe59d732175592d1248dbbaf89af196ede178e48bd32703943fcb785791df16c
- MD5 39da13dc57d1bccf4cc20e3ebe059d32
- SHA1 0e8ba59568d4b97839ab5b9f87efa52be80cc620
- SHA512 f980465b9192d0eb347f3a5e24571eb38bb4db7bdcff16a647d4f5683d4d511e4907e8ff4abab624b16da842be8c88c1c1cdf01e78313abbbb15a6a6f85ca927
- SSDEEP 49152:ZZUATAK7IjnDreNwL934vsDEuJUNliAceq58uCiqHUzj23P2Ph0jpIMlXn:ZZ/TWDreQDEuJU9mGjij61
- TLSH T194F5AF317701C4B6D95202B0ADBDEA5F816DBD218F7414C7B3D82F6E55B19C22B32A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1