General
- Target 2026-09-03_ffd2d48fb9ba2c5d8e93d0d6e689c386_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- Sample260903-v9flkasdrf
- SHA256 11fe71f5b4849a077e120ad7cd4bac4f88877a9cb1003d07102ef74e736e12c7
- MD5 ffd2d48fb9ba2c5d8e93d0d6e689c386
- SHA1 a8c02f02928557bdf6fdf10d23c8f813ed5b7ee0
- SHA512 16f98158024a5b359c04cb2bbfe7dabcd8e4bcf96648fdaf934abd79d41da0a8c64961acbcf0e9a8e562b84d117f491ca1f0e050518a086da8447b9cae00d1e8
- SSDEEP 393216:2lFyfLPHiRE5bx/NSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCc9:AUbx1hpKOxk6lFk
- TLSH T1A6F62309B792DCA4C8302B7C20686317813E1D434F65AAEF5E927B5D4E78AF1C9B3536
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_ffd2d48fb9ba2c5d8e93d0d6e689c386_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_ffd2d48fb9ba2c5d8e93d0d6e689c386_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- SHA256 11fe71f5b4849a077e120ad7cd4bac4f88877a9cb1003d07102ef74e736e12c7
- MD5 ffd2d48fb9ba2c5d8e93d0d6e689c386
- SHA1 a8c02f02928557bdf6fdf10d23c8f813ed5b7ee0
- SHA512 16f98158024a5b359c04cb2bbfe7dabcd8e4bcf96648fdaf934abd79d41da0a8c64961acbcf0e9a8e562b84d117f491ca1f0e050518a086da8447b9cae00d1e8
- SSDEEP 393216:2lFyfLPHiRE5bx/NSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCc9:AUbx1hpKOxk6lFk
- TLSH T1A6F62309B792DCA4C8302B7C20686317813E1D434F65AAEF5E927B5D4E78AF1C9B3536
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.