General
- Target 2026-09-29_2262036161bdb702048d85ae962975f6_amadey_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 2.0MB
- Sample260930-e2kbsassfz
- SHA256 3bf03ba36b0acb175c686dc63a18695fae4d561b85193cf8b97ad6eb0bca0681
- MD5 2262036161bdb702048d85ae962975f6
- SHA1 9883133a8c8165938ba55614b3855ac27b2cbd0a
- SHA512 49120dcdbcd5bf8c0244b91d417347330da5ce2d7103759da7eea8267c7e66aa3db6602431ff3b2bbd4765b9ca53592d361127032d87b6b8f96ea2c8234a3e2f
- SSDEEP 49152:HclPBqC7KKYFBGZJ7LxfJ4klKXn6m1gvtlxSGLdrFxz:HclPpEGZXfJ4kigf8G5rFxz
- TLSH T1E7A50111B491E036D8032172652CF339A639E6064F708ED7D3889DAC6FF55D21E3A7AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-29_2262036161bdb702048d85ae962975f6_amadey_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_2262036161bdb702048d85ae962975f6_amadey_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 2.0MB
- SHA256 3bf03ba36b0acb175c686dc63a18695fae4d561b85193cf8b97ad6eb0bca0681
- MD5 2262036161bdb702048d85ae962975f6
- SHA1 9883133a8c8165938ba55614b3855ac27b2cbd0a
- SHA512 49120dcdbcd5bf8c0244b91d417347330da5ce2d7103759da7eea8267c7e66aa3db6602431ff3b2bbd4765b9ca53592d361127032d87b6b8f96ea2c8234a3e2f
- SSDEEP 49152:HclPBqC7KKYFBGZJ7LxfJ4klKXn6m1gvtlxSGLdrFxz:HclPpEGZXfJ4kigf8G5rFxz
- TLSH T1E7A50111B491E036D8032172652CF339A639E6064F708ED7D3889DAC6FF55D21E3A7AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1