General
- Target 2026-08-09_c4b9ebfce9261fd8798cf9376f0346ec_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 4.1MB
- Sample260809-3rzkqa1tex
- SHA256 2325e19ca62ffeef93f41843a8b2d2db43e226fad2df68a20496fb72e9614632
- MD5 c4b9ebfce9261fd8798cf9376f0346ec
- SHA1 5aa7a7ad08262945a6136cd382f66d7ae33d4204
- SHA512 a37185579c2d7661ad51c796bc1b0898eb60a826367d4e7f316c7404e20a763fc486e5dc1bb9535c66ea86859d493debf29625df2bd92ae63766239952e5f1d6
- SSDEEP 98304:EOgZIlc77sGjljRXCkmWn6AZW6JGFLOAkGkzdnEVomFHKnPYSqGsQr:ElZIlcNwHO6AZW6JGFLOyomFHKnPYUj
- TLSH T1F716BF217FED046AC0A31332CEDAF5B8717FBC646B29219723953E2AB9303525B19537
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_c4b9ebfce9261fd8798cf9376f0346ec_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_c4b9ebfce9261fd8798cf9376f0346ec_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 4.1MB
- SHA256 2325e19ca62ffeef93f41843a8b2d2db43e226fad2df68a20496fb72e9614632
- MD5 c4b9ebfce9261fd8798cf9376f0346ec
- SHA1 5aa7a7ad08262945a6136cd382f66d7ae33d4204
- SHA512 a37185579c2d7661ad51c796bc1b0898eb60a826367d4e7f316c7404e20a763fc486e5dc1bb9535c66ea86859d493debf29625df2bd92ae63766239952e5f1d6
- SSDEEP 98304:EOgZIlc77sGjljRXCkmWn6AZW6JGFLOAkGkzdnEVomFHKnPYSqGsQr:ElZIlcNwHO6AZW6JGFLOyomFHKnPYUj
- TLSH T1F716BF217FED046AC0A31332CEDAF5B8717FBC646B29219723953E2AB9303525B19537
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1