General
- Target 2026-10-31_6f87e0e3e5a0f6a3986f2c583208edc9_amadey_darkgate_elex_luca-stealer_magniber_njrat
- Size 17.0MB
- Sample261102-apdags1w9m
- SHA256 1ec8ccd0cb6119854969d58c3e08cfae447cf65a2a8d9b02e6b52c80dc7380db
- MD5 6f87e0e3e5a0f6a3986f2c583208edc9
- SHA1 77d4000af38ddbd2f838ddcc37e47f5239116b41
- SHA512 c0d544ae17c0e0959281c9a099e451c6ce19eee2aee7ceca97db3a8578e0858b22065d150583b7dd8b6afa040b16f50340caa8e5bd44f5a42d1ec14e2becd81a
- SSDEEP 393216:dQk8iM4Uwu1xxW/YovvlvmLlweFKipg9a2Jw9:dQv5hEv6lwApg02J
- TLSH T10D079D033241E0F6C547A1B4794EE77C432596395F214EE7E2D09EFD6DB26E21C32A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-31_6f87e0e3e5a0f6a3986f2c583208edc9_amadey_darkgate_elex_luca-stealer_magniber_njrat.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-31_6f87e0e3e5a0f6a3986f2c583208edc9_amadey_darkgate_elex_luca-stealer_magniber_njrat.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-31_6f87e0e3e5a0f6a3986f2c583208edc9_amadey_darkgate_elex_luca-stealer_magniber_njrat
- Size 17.0MB
- SHA256 1ec8ccd0cb6119854969d58c3e08cfae447cf65a2a8d9b02e6b52c80dc7380db
- MD5 6f87e0e3e5a0f6a3986f2c583208edc9
- SHA1 77d4000af38ddbd2f838ddcc37e47f5239116b41
- SHA512 c0d544ae17c0e0959281c9a099e451c6ce19eee2aee7ceca97db3a8578e0858b22065d150583b7dd8b6afa040b16f50340caa8e5bd44f5a42d1ec14e2becd81a
- SSDEEP 393216:dQk8iM4Uwu1xxW/YovvlvmLlweFKipg9a2Jw9:dQv5hEv6lwApg02J
- TLSH T10D079D033241E0F6C547A1B4794EE77C432596395F214EE7E2D09EFD6DB26E21C32A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Suspicious use of NtSetInformationThreadHideFromDebugger