General
- Target 2026-10-22_343a1f67d8f1f3e22605ff9b0a4844b4_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat
- Size 9.8MB
- Sample261024-vlnx2aa171
- SHA256 0dd8c4ee9fcb05437be01e0770c7698d2cdbc8fce482930806571872458be92a
- MD5 343a1f67d8f1f3e22605ff9b0a4844b4
- SHA1 482435d8d1ffda3c250ed5a4ed328fb7f3378fd2
- SHA512 4d4393df834aa2d0066caba6d8273f282cc822f3624da056a54e9158803d129c7934188c18a221ca65eff8f198dd27a4616cbf1b76dc9fee31cb705525a00ad3
- SSDEEP 196608:z4GJoA+rUX+B8k7uHmovJrlFzQO7iYWyaP3BeZFtGvMA8JGmMv7NRsIUfki:grUXqgmohrlxriYWpPBeZSH8/MMTki
- TLSH T19FA6CF3375C080B7D25202B0998CBB9597FDF9700A72969BAB8C361D2F718C1AB36757
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_343a1f67d8f1f3e22605ff9b0a4844b4_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_343a1f67d8f1f3e22605ff9b0a4844b4_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_343a1f67d8f1f3e22605ff9b0a4844b4_amadey_darkgate_elex_glassworm_luca-stealer_lynx_medusalocker_njrat
- Size 9.8MB
- SHA256 0dd8c4ee9fcb05437be01e0770c7698d2cdbc8fce482930806571872458be92a
- MD5 343a1f67d8f1f3e22605ff9b0a4844b4
- SHA1 482435d8d1ffda3c250ed5a4ed328fb7f3378fd2
- SHA512 4d4393df834aa2d0066caba6d8273f282cc822f3624da056a54e9158803d129c7934188c18a221ca65eff8f198dd27a4616cbf1b76dc9fee31cb705525a00ad3
- SSDEEP 196608:z4GJoA+rUX+B8k7uHmovJrlFzQO7iYWyaP3BeZFtGvMA8JGmMv7NRsIUfki:grUXqgmohrlxriYWpPBeZSH8/MMTki
- TLSH T19FA6CF3375C080B7D25202B0998CBB9597FDF9700A72969BAB8C361D2F718C1AB36757
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1