General
- Target 2026-11-12_664bbbab7824a1476f2c09a48d94ccec_adposhel_darkgate_elex_luca-stealer_mespinoza_njrat_remcos
- Size 1.9MB
- Sample261113-bvw58aev2v
- SHA256 de9c2558cda40d2200b4bde4e782c250ec7d5796ba711a2f0f9ffc0631ec545d
- MD5 664bbbab7824a1476f2c09a48d94ccec
- SHA1 f99beec99438ef6f2cf4b28669e5cd32fbe7d2a5
- SHA512 e95afa43a70c95a59c772b20575c38226d5ee250dabeaeabc255398e5ee6c74e81145aaef5f2bf7b8163a22c03460c248530a66a7c0160fdb6b6187cf7f80808
- SSDEEP 24576:ncdIaquligZ+PSJbiqJAeLjFP+D0vPKs0DRXw:nLSZFbQe/t3z0D
- TLSH T11595D012BBC0D071E9B22930CA61A7F59ABDBD20F924CD1B67D43E4D79701D0A53A7A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-12_664bbbab7824a1476f2c09a48d94ccec_adposhel_darkgate_elex_luca-stealer_mespinoza_njrat_remcos.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-12_664bbbab7824a1476f2c09a48d94ccec_adposhel_darkgate_elex_luca-stealer_mespinoza_njrat_remcos.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-12_664bbbab7824a1476f2c09a48d94ccec_adposhel_darkgate_elex_luca-stealer_mespinoza_njrat_remcos
- Size 1.9MB
- SHA256 de9c2558cda40d2200b4bde4e782c250ec7d5796ba711a2f0f9ffc0631ec545d
- MD5 664bbbab7824a1476f2c09a48d94ccec
- SHA1 f99beec99438ef6f2cf4b28669e5cd32fbe7d2a5
- SHA512 e95afa43a70c95a59c772b20575c38226d5ee250dabeaeabc255398e5ee6c74e81145aaef5f2bf7b8163a22c03460c248530a66a7c0160fdb6b6187cf7f80808
- SSDEEP 24576:ncdIaquligZ+PSJbiqJAeLjFP+D0vPKs0DRXw:nLSZFbQe/t3z0D
- TLSH T11595D012BBC0D071E9B22930CA61A7F59ABDBD20F924CD1B67D43E4D79701D0A53A7A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1