General
- Target 2026-08-23_e9cd573a481da21075ebc7bfb5a8c254_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 20.0MB
- Sample260823-vc8k3sycph
- SHA256 b1e6f31df7c2300baea235199a43420432c714b6d22bb842fa991eccef70c742
- MD5 e9cd573a481da21075ebc7bfb5a8c254
- SHA1 6747161f7058450c4ca366f441ba0dba9a7b3afb
- SHA512 91edf427d6a104ccc21d006721f94ce07cd9dbd3baa718b1eeab815347a4da70fed717f114be6a18f8323f9cfa6e07bca071d5bc2a1d34a5d5384ac7a99f396b
- SSDEEP 393216:JK6HiRE5bx1NSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMd:AUbxThpKOxk6lFiPvQ66
- TLSH T1FA273322B79258A6DC749F7C04196303403F2E47DE98AFEF3BDA37694A715F08976842
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_e9cd573a481da21075ebc7bfb5a8c254_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_e9cd573a481da21075ebc7bfb5a8c254_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 20.0MB
- SHA256 b1e6f31df7c2300baea235199a43420432c714b6d22bb842fa991eccef70c742
- MD5 e9cd573a481da21075ebc7bfb5a8c254
- SHA1 6747161f7058450c4ca366f441ba0dba9a7b3afb
- SHA512 91edf427d6a104ccc21d006721f94ce07cd9dbd3baa718b1eeab815347a4da70fed717f114be6a18f8323f9cfa6e07bca071d5bc2a1d34a5d5384ac7a99f396b
- SSDEEP 393216:JK6HiRE5bx1NSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMd:AUbxThpKOxk6lFiPvQ66
- TLSH T1FA273322B79258A6DC749F7C04196303403F2E47DE98AFEF3BDA37694A715F08976842
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.