General
- Target 2026-07-17_2415bc858bdff0c5837c10d2bea00861_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 5.4MB
- Sample260718-e7ba3abx21
- SHA256 6cea63e510c510bfee8255ee3b09ccc4d4ab7b8215105c42847e63660b57d1e4
- MD5 2415bc858bdff0c5837c10d2bea00861
- SHA1 8d0b5a18236c96a690cb42f5dc947a7c6895239e
- SHA512 7dbb9ff0eaaded86023dd3929ffc188d78c97582f11c10c04d5044dac86be31b54dff67920a43930127e19f4b4621154ed49d7d1c113c0504d67b424c0ba868f
- SSDEEP 98304:g7BjLAAZv3zEgtVk2xwgglEHgI/K6Je43CZOvXMGWNfaF:g7dAAugtVvwgglNiKCmOvMGWQF
- TLSH T1D346E04F77D9C1EDFAB666719A34465C1F16BCAA9AF5858F0340B10C18F09C04E3BBA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-17_2415bc858bdff0c5837c10d2bea00861_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_2415bc858bdff0c5837c10d2bea00861_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_2415bc858bdff0c5837c10d2bea00861_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 5.4MB
- SHA256 6cea63e510c510bfee8255ee3b09ccc4d4ab7b8215105c42847e63660b57d1e4
- MD5 2415bc858bdff0c5837c10d2bea00861
- SHA1 8d0b5a18236c96a690cb42f5dc947a7c6895239e
- SHA512 7dbb9ff0eaaded86023dd3929ffc188d78c97582f11c10c04d5044dac86be31b54dff67920a43930127e19f4b4621154ed49d7d1c113c0504d67b424c0ba868f
- SSDEEP 98304:g7BjLAAZv3zEgtVk2xwgglEHgI/K6Je43CZOvXMGWNfaF:g7dAAugtVvwgglNiKCmOvMGWQF
- TLSH T1D346E04F77D9C1EDFAB666719A34465C1F16BCAA9AF5858F0340B10C18F09C04E3BBA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.