General
- Target 2026-02-28_8aca285b773a58ddb209d7d1faddccfd_darkgate_elex_emotet_njrat_stop
- Size 3.6MB
- Sample260228-nb7ttscz5c
- SHA256 2188a24799a41b8262d2d648255ba693923bfbdb9876bd934e772f1e66b392ba
- MD5 8aca285b773a58ddb209d7d1faddccfd
- SHA1 0c214d40e0066a6a5d2dae315b295bd8a22e0afe
- SHA512 fb70ec61fa277104d11a6d5b6aecb5d0be50f2bcefe9c681e04fcbf53be48b62bc5024653cca2efd96964ebf4aaa32316201ac1c20f176694b8dcf21bcc2af9a
- SSDEEP 49152:lwP2u9yHwelb0pPmHh/vwacGQyER2bgW7cFPtgF+Cd+0jrjcThjV4rt:lw+u9yHwelugsGLEegygURd+SjcC
- TLSH T1BD067B12B243852AD5F61772876B063D51E8AE7CD714C3C7B2C43AA86B3C7E56E3121B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-02-28_8aca285b773a58ddb209d7d1faddccfd_darkgate_elex_emotet_njrat_stop.exe
Resource
win10v2004-20260130-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-02-28_8aca285b773a58ddb209d7d1faddccfd_darkgate_elex_emotet_njrat_stop.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-02-28_8aca285b773a58ddb209d7d1faddccfd_darkgate_elex_emotet_njrat_stop
- Size 3.6MB
- SHA256 2188a24799a41b8262d2d648255ba693923bfbdb9876bd934e772f1e66b392ba
- MD5 8aca285b773a58ddb209d7d1faddccfd
- SHA1 0c214d40e0066a6a5d2dae315b295bd8a22e0afe
- SHA512 fb70ec61fa277104d11a6d5b6aecb5d0be50f2bcefe9c681e04fcbf53be48b62bc5024653cca2efd96964ebf4aaa32316201ac1c20f176694b8dcf21bcc2af9a
- SSDEEP 49152:lwP2u9yHwelb0pPmHh/vwacGQyER2bgW7cFPtgF+Cd+0jrjcThjV4rt:lw+u9yHwelugsGLEegygURd+SjcC
- TLSH T1BD067B12B243852AD5F61772876B063D51E8AE7CD714C3C7B2C43AA86B3C7E56E3121B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Luminosity
Luminosity is a RAT family that was on sale, while claiming to be a system administration utility.
-
Luminosity family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1