General
- Target 2026-06-27_d311376633d78de2e60e42bd68c75d82_darkgate_elex_luca-stealer_njrat_remcos
- Size 1.8MB
- Sample260629-c265fabt91
- SHA256 756262706e8e8dce0354d4fb9dd6ba065cc9c018dcbf2adbf87e0ea920a6418d
- MD5 d311376633d78de2e60e42bd68c75d82
- SHA1 9b62f60f8ca762f0fd8195059059a015002c4ab3
- SHA512 e34a9cad6df94cb345e7e4afb98ae76cfab172cfc2760b7a7fbb00635c3cd314bd4a46548398b11b6f461a5954aef88f0f3c6dbaaa633ad1bf635ab1b74e5d5b
- SSDEEP 24576:U/m+3T81/ciE9SYG4SEh9gQPWJ92sqjnhMgeiCl7G0nehbGZpbD:9iT8KimS4wQU6Dmg27RnWGj
- TLSH T1B895E1217881C032C17378754E79E2B298AE78215B3059DB33DD1DB99FB45C1AB39A2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_d311376633d78de2e60e42bd68c75d82_darkgate_elex_luca-stealer_njrat_remcos.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_d311376633d78de2e60e42bd68c75d82_darkgate_elex_luca-stealer_njrat_remcos.exe
Resource
win11ltsc2024-20260618-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_d311376633d78de2e60e42bd68c75d82_darkgate_elex_luca-stealer_njrat_remcos
- Size 1.8MB
- SHA256 756262706e8e8dce0354d4fb9dd6ba065cc9c018dcbf2adbf87e0ea920a6418d
- MD5 d311376633d78de2e60e42bd68c75d82
- SHA1 9b62f60f8ca762f0fd8195059059a015002c4ab3
- SHA512 e34a9cad6df94cb345e7e4afb98ae76cfab172cfc2760b7a7fbb00635c3cd314bd4a46548398b11b6f461a5954aef88f0f3c6dbaaa633ad1bf635ab1b74e5d5b
- SSDEEP 24576:U/m+3T81/ciE9SYG4SEh9gQPWJ92sqjnhMgeiCl7G0nehbGZpbD:9iT8KimS4wQU6Dmg27RnWGj
- TLSH T1B895E1217881C032C17378754E79E2B298AE78215B3059DB33DD1DB99FB45C1AB39A2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1