2026-07-30_3b65ee9b1e011ada25fb70301e30b06c_darkgate_elex_luca-stealer_mespinoza_njrat_remcos

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-30_3b65ee9b1e011ada25fb70301e30b06c_darkgate_elex_luca-stealer_mespinoza_njrat_remcos
Size 708KB
Sample260730-d7pb9acl7v
SHA256 92d5ee57a12b124f05b7d7797f09baa71f8e4785d180491d0121fa555481d51e
MD5 3b65ee9b1e011ada25fb70301e30b06c
SHA1 15c9bf65ec5dd25a6dfff107cc23131922b628c8
SHA512 05464c6f05027854f224f258488abce541c7dfe60723079ecaace74f4269888ca830b420c100e0021baa9862aa0c3446c87a2c506ca2dfedcea659498aa65718
SSDEEP 12288:2va30Vzel3v5RB9Ua7JAZYT+C55FODMqXHbQnGSNqZMQWpP2rFmM06:78zel3v5RB9Ua7JAZYTB55FODUqetpPy
TLSH
T167F46D1179C1803AE5B3217249BDA26606AEBC310B3499DFA3C81B7D5FB49D27E3171B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_3b65ee9b1e011ada25fb70301e30b06c_darkgate_elex_luca-stealer_mespinoza_njrat_remcos

File Explorer

2026-07-30_3b65ee9b1e011ada25fb70301e30b06c_darkgate_elex_luca-stealer_mespinoza_njrat_remcos

.exe 708KB

2026-07-30_3b65ee9b1e011ada25fb70301e30b06c_darkgate_elex_luca-stealer_mespinoza_njrat_remcos

IMPHASH 7b5a9eaabd6abecc053a474cc44a1325
SHA256 92d5ee57a12b124f05b7d7797f09baa71f8e4785d180491d0121fa555481d51e
MD5 3b65ee9b1e011ada25fb70301e30b06c
SHA1 15c9bf65ec5dd25a6dfff107cc23131922b628c8
SHA512 05464c6f05027854f224f258488abce541c7dfe60723079ecaace74f4269888ca830b420c100e0021baa9862aa0c3446c87a2c506ca2dfedcea659498aa65718
SSDEEP 12288:2va30Vzel3v5RB9Ua7JAZYT+C55FODMqXHbQnGSNqZMQWpP2rFmM06:78zel3v5RB9Ua7JAZYTB55FODUqetpPy
TLSH
T167F46D1179C1803AE5B3217249BDA26606AEBC310B3499DFA3C81B7D5FB49D27E3171B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

249295

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\7HS\Desktop\BO2012Launcher\build_min_x86\BO2012Launcher.pdb

shell32

Shell_NotifyIconW ShellExecuteExW

comctl32

InitCommonControlsEx

ws2_32

freeaddrinfo gethostname WSACleanup WSAStartup getaddrinfo WSAAddressToStringW

shlwapi

PathRemoveFileSpecW PathFileExistsW

kernel32

OutputDebugStringW OutputDebugStringA SetEnvironmentVariableW GetModuleFileNameW GetDiskFreeSpaceExW GetCurrentDirectoryW SetCurrentDirectoryW GetProcAddress GetModuleHandleW FindFirstFileW FindNextFileW FindClose GetFileAttributesW MultiByteToWideChar CopyFileW WideCharToMultiByte WritePrivateProfileStringW GetPrivateProfileIntW GetPrivateProfileStringW GetLocalTime GetCurrentProcessId GetTickCount SetErrorMode DeleteFileW CloseHandle RemoveDirectoryW SetFileAttributesW GetLastError CreateProcessW FormatMessageW GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW Sleep TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime CompareStringW SetStdHandle GetLocaleInfoW GetCPInfo SetEvent ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId InitializeSListHead SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExW FindFirstFileExA GetTimeZoneInformation SetConsoleCtrlHandler GetProcessHeap EnumSystemLocalesW GetUserDefaultLCID IsValidLocale HeapSize GetTimeFormatW GetDateFormatW GetFileType GetCurrentThread GetACP WriteFile GetStdHandle GetModuleFileNameA GetModuleHandleExW ExitProcess HeapFree HeapReAlloc HeapAlloc InterlockedFlushSList InterlockedPushEntrySList LoadLibraryExW FreeLibrary RtlUnwind RaiseException GetConsoleCP GetConsoleMode SetFilePointerEx FlushFileBuffers WriteConsoleW LCMapStringW CreateFileW

user32

GetWindowLongW GetWindowTextLengthW DefWindowProcW CallWindowProcW LoadIconW GetWindowRect DestroyWindow GetDC FillRect PostMessageW DestroyIcon CreateWindowExW SendMessageW GetSystemMetrics SetWindowTextW CreatePopupMenu RegisterClassExW TrackPopupMenu ShowWindow GetDlgCtrlID ClientToScreen MapWindowPoints TrackMouseEvent AdjustWindowRect DestroyMenu LoadCursorW GetClassNameW SetCursor SetWindowLongW GetClientRect DrawTextW PostQuitMessage PtInRect UpdateWindow SetForegroundWindow InvalidateRect ReleaseDC GetCursorPos BeginPaint EndPaint EnableWindow GetWindowTextW GetMessageW DispatchMessageW TranslateMessage MessageBoxW AppendMenuW

gdi32

SetBkColor DeleteObject CreateSolidBrush GetStockObject CreateFontW EnumFontFamiliesExW SelectObject SetBkMode SetTextColor

ole32

CoInitializeEx CoUninitialize

Name

.text

Size

541KB

Virtual Size

541KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

106KB

Virtual Size

105KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_3b65ee9b1e011ada25fb70301e30b06c_darkgate_elex_luca-stealer_mespinoza_njrat_remcos

shell32

comctl32

ws2_32

shlwapi

kernel32

user32

gdi32

ole32

generic