General
- Target 2026-09-01_0342825c705ad75ccddde775450b939b_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 12.0MB
- Sample260901-2agsxaycpe
- SHA256 7548c79b2d03cb19f39d50af07f474d33863cd6a10c94d774b121506400754d2
- MD5 0342825c705ad75ccddde775450b939b
- SHA1 7602acf14b7bbb92a87f50d2baf5112532ac1bf6
- SHA512 bcd6712f45f7142b7289582dfaa98a763669cf50f56ddb1f0206f1329b4495df02e6019c207e3f4dcf15526c8dda34e426ad4201a64b12a3ff7dfa9077842bf2
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bx3OYDMVByQyVG/uzGNVyAl3K8fCGnbP3JzATC4C8Wfm:2lFyfLPHiRE5bxNDMTNSG/lVrl3KExLQ
- TLSH T168C62309B792DD65C8301B7C20686313813E0D034F55AAEF6E967B5D4E78AF1CAB3636
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-01_0342825c705ad75ccddde775450b939b_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_0342825c705ad75ccddde775450b939b_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 12.0MB
- SHA256 7548c79b2d03cb19f39d50af07f474d33863cd6a10c94d774b121506400754d2
- MD5 0342825c705ad75ccddde775450b939b
- SHA1 7602acf14b7bbb92a87f50d2baf5112532ac1bf6
- SHA512 bcd6712f45f7142b7289582dfaa98a763669cf50f56ddb1f0206f1329b4495df02e6019c207e3f4dcf15526c8dda34e426ad4201a64b12a3ff7dfa9077842bf2
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bx3OYDMVByQyVG/uzGNVyAl3K8fCGnbP3JzATC4C8Wfm:2lFyfLPHiRE5bxNDMTNSG/lVrl3KExLQ
- TLSH T168C62309B792DD65C8301B7C20686313813E0D034F55AAEF6E967B5D4E78AF1CAB3636
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.