General
- Target 2026-08-23_9cdfc5f6e707d76b2b603847adc0faf9_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 12.0MB
- Sample260825-23da7abb53
- SHA256 d5a02ebda075c3b35b320c2c0ae49544d39920da152fdce9a64cf455429b8d76
- MD5 9cdfc5f6e707d76b2b603847adc0faf9
- SHA1 5a34bb534f68bc97c227c7014031a8beea65569f
- SHA512 5bfc504cd16ac1dad3689c806767d627b04047866d038a93dcadb16c76875f187051c83517123bb80e7dcfb749774477e10bc51690a5bbf128f0d83779ade67b
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bx/QCcHsJcQvQaT0u5SHvOYDMVByQyVG/uzGNVyAll:2lFyfLPHiRE5bx/QCcv6QaAu5SVDMTNB
- TLSH T160C62305B79298B5C8301B7C2064A313813E1E434F65AAEF5F967B5D4E78AF1C6B3632
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_9cdfc5f6e707d76b2b603847adc0faf9_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_9cdfc5f6e707d76b2b603847adc0faf9_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 12.0MB
- SHA256 d5a02ebda075c3b35b320c2c0ae49544d39920da152fdce9a64cf455429b8d76
- MD5 9cdfc5f6e707d76b2b603847adc0faf9
- SHA1 5a34bb534f68bc97c227c7014031a8beea65569f
- SHA512 5bfc504cd16ac1dad3689c806767d627b04047866d038a93dcadb16c76875f187051c83517123bb80e7dcfb749774477e10bc51690a5bbf128f0d83779ade67b
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bx/QCcHsJcQvQaT0u5SHvOYDMVByQyVG/uzGNVyAll:2lFyfLPHiRE5bx/QCcv6QaAu5SVDMTNB
- TLSH T160C62305B79298B5C8301B7C2064A313813E1E434F65AAEF5F967B5D4E78AF1C6B3632
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.