General
- Target 2026-08-20_f9b5a7998bc65b7320bc4ba42c16dbc9_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 12.0MB
- Sample260821-ckswgseq61
- SHA256 0003c0f364b1ef1f55128192d12a103760314a8926ff449f3fb5f590e745b434
- MD5 f9b5a7998bc65b7320bc4ba42c16dbc9
- SHA1 7a4fa25750ba44b85c01d8fe0f5f10e02155ad63
- SHA512 6cd3e3c73f88fc205f1594a8410ecb75ebc7136bde5ad0de610b80858b3204a788d3cf740c5813113b0b8d578ef9d1133d55cf2defa515b40f11e4e100c8a896
- SSDEEP 196608:JZ872k1AeAi2KOld5bxRzvOYDMVByQyVG/uzGNVyAl3K8fCGnbP3JzATC4C8WO:JK6HiRE5bxTDMTNSG/lVrl3KExL3JzAt
- TLSH T150C62322B79158A6DC749F7C001D6303403F2E47CE98ABEF3AD637AD4A715F189B6942
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_f9b5a7998bc65b7320bc4ba42c16dbc9_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_f9b5a7998bc65b7320bc4ba42c16dbc9_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 12.0MB
- SHA256 0003c0f364b1ef1f55128192d12a103760314a8926ff449f3fb5f590e745b434
- MD5 f9b5a7998bc65b7320bc4ba42c16dbc9
- SHA1 7a4fa25750ba44b85c01d8fe0f5f10e02155ad63
- SHA512 6cd3e3c73f88fc205f1594a8410ecb75ebc7136bde5ad0de610b80858b3204a788d3cf740c5813113b0b8d578ef9d1133d55cf2defa515b40f11e4e100c8a896
- SSDEEP 196608:JZ872k1AeAi2KOld5bxRzvOYDMVByQyVG/uzGNVyAl3K8fCGnbP3JzATC4C8WO:JK6HiRE5bxTDMTNSG/lVrl3KExL3JzAt
- TLSH T150C62322B79158A6DC749F7C001D6303403F2E47CE98ABEF3AD637AD4A715F189B6942
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.