General
- Target 2026-11-01_a84a8541a764778217e4d19fce2ecff2_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat
- Size 4.2MB
- Sample261102-plr2sstthv
- SHA256 e8c6f90a2b227d248784e59744b7aaeca36bf0704ffc160af1ba6948f9aa6511
- MD5 a84a8541a764778217e4d19fce2ecff2
- SHA1 f2c6f4efc34f36c619aef6fb3788961eb4fc192c
- SHA512 861a90ca913de780229e2a67e1eab18ec860fb78eac0a3cbc20d359890d7d0592c4e7ab44cc6eebab7d3e0c309656561b4374e6d12b8fe2a7b465f4b036ba55e
- SSDEEP 49152:PPBiJFTSey2ubvRoYnR/VukqwxDAPAVAQcQhzWkN8YTp3FH7sygmwwOul/Edkky:PJSImyICxkPAVAQcQhzWkOYT/b
- TLSH T109268DA03686C131E555527A9DBDBFBE881DA8382BB540C792C44B6E38351C32F35F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_a84a8541a764778217e4d19fce2ecff2_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_a84a8541a764778217e4d19fce2ecff2_amadey_darkgate_elex_glassworm_luca-stealer_lynx_njrat
- Size 4.2MB
- SHA256 e8c6f90a2b227d248784e59744b7aaeca36bf0704ffc160af1ba6948f9aa6511
- MD5 a84a8541a764778217e4d19fce2ecff2
- SHA1 f2c6f4efc34f36c619aef6fb3788961eb4fc192c
- SHA512 861a90ca913de780229e2a67e1eab18ec860fb78eac0a3cbc20d359890d7d0592c4e7ab44cc6eebab7d3e0c309656561b4374e6d12b8fe2a7b465f4b036ba55e
- SSDEEP 49152:PPBiJFTSey2ubvRoYnR/VukqwxDAPAVAQcQhzWkN8YTp3FH7sygmwwOul/Edkky:PJSImyICxkPAVAQcQhzWkOYT/b
- TLSH T109268DA03686C131E555527A9DBDBFBE881DA8382BB540C792C44B6E38351C32F35F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1