General
- Target 2026-09-01_129ede7188a2c6acac8f61964f24d243_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- Sample260901-1cdnlaxgja
- SHA256 aeb88d5da8adb2734a329988adf6e2eddac8577b3d139987aaf418736bd85c70
- MD5 129ede7188a2c6acac8f61964f24d243
- SHA1 1eabc34875940549f807fc29b3b7d8289fa11011
- SHA512 47c8619bfdac88c155253f3b11f9647325c52594de322123ea027ec824b7f7bebb879fe06f1554ca4ecbdd1b77375b8d99f2d9a9cbda6f19284d33f9f5d4f77b
- SSDEEP 393216:JK6HiRE5bxXvlQCcv6QaAu5SVDMTNSG/lVrl4:AUbxXiPvQ6yhG
- TLSH T154D62312B79258A6CC749F7C0019A303403F2E47DE98AFEF3BDA37694A715F08976952
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-01_129ede7188a2c6acac8f61964f24d243_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_129ede7188a2c6acac8f61964f24d243_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- SHA256 aeb88d5da8adb2734a329988adf6e2eddac8577b3d139987aaf418736bd85c70
- MD5 129ede7188a2c6acac8f61964f24d243
- SHA1 1eabc34875940549f807fc29b3b7d8289fa11011
- SHA512 47c8619bfdac88c155253f3b11f9647325c52594de322123ea027ec824b7f7bebb879fe06f1554ca4ecbdd1b77375b8d99f2d9a9cbda6f19284d33f9f5d4f77b
- SSDEEP 393216:JK6HiRE5bxXvlQCcv6QaAu5SVDMTNSG/lVrl4:AUbxXiPvQ6yhG
- TLSH T154D62312B79258A6CC749F7C0019A303403F2E47DE98AFEF3BDA37694A715F08976952
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.