General
- Target 2026-09-01_2ff5b8702f8be64b8a1edba2561bae1d_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 22.0MB
- Sample260903-rh7desaj91
- SHA256 1c9ec075408e386f7fc40f2b5fad8d8e804d46bdb096799ced0067e1e510268f
- MD5 2ff5b8702f8be64b8a1edba2561bae1d
- SHA1 abec4997238d40d2f35b5f4d3fa68fcf117ba908
- SHA512 997cf9faef73e5574aa7b0d4b6e481a1190e6948212283dabfdfd16720c91ae2fc9c51913499575d633e7e86a0dbca7078c27cbfba72e113628995cfac8a66a6
- SSDEEP 393216:JK6HiRE5bxoWfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8Wfc:AUbxo6lFiPvQ6yhpKOxk1
- TLSH T147373322B79258A6DC749F3C04196303413F2E47CE98ABEF3BDA37694A715F08977942
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-01_2ff5b8702f8be64b8a1edba2561bae1d_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_2ff5b8702f8be64b8a1edba2561bae1d_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 22.0MB
- SHA256 1c9ec075408e386f7fc40f2b5fad8d8e804d46bdb096799ced0067e1e510268f
- MD5 2ff5b8702f8be64b8a1edba2561bae1d
- SHA1 abec4997238d40d2f35b5f4d3fa68fcf117ba908
- SHA512 997cf9faef73e5574aa7b0d4b6e481a1190e6948212283dabfdfd16720c91ae2fc9c51913499575d633e7e86a0dbca7078c27cbfba72e113628995cfac8a66a6
- SSDEEP 393216:JK6HiRE5bxoWfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8Wfc:AUbxo6lFiPvQ6yhpKOxk1
- TLSH T147373322B79258A6DC749F3C04196303413F2E47CE98ABEF3BDA37694A715F08977942
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.