General
- Target 2026-09-01_07b7b98423891700bec71add2c83414a_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- Sample260903-vcwxaack5z
- SHA256 2375be90a59451a8505c74a4d32f5e2dc033819d4e4e877a58be0e373796b6b3
- MD5 07b7b98423891700bec71add2c83414a
- SHA1 db63e84aa9d2ebc751cdb0605122ec05fa964190
- SHA512 d5f67b68a6fdafb30c9f03a2c4a6df60f1c68ad0a4822c5a6b968f876bd98f4fe7fdbea4462c1f594be04b36ad553fce936c4efccc7a3d769d44463f7c3b7e1a
- SSDEEP 393216:2lFyfLPHiRE5bxVzATzC8WfeIRVlFvlQCcv6QaAu5S4:AUbxlk6lFiPvQP
- TLSH T158F6230AB7929875C8305B7C20286313823E1D434F65AFEB5E967B594E78AF1C5B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-01_07b7b98423891700bec71add2c83414a_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_07b7b98423891700bec71add2c83414a_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- SHA256 2375be90a59451a8505c74a4d32f5e2dc033819d4e4e877a58be0e373796b6b3
- MD5 07b7b98423891700bec71add2c83414a
- SHA1 db63e84aa9d2ebc751cdb0605122ec05fa964190
- SHA512 d5f67b68a6fdafb30c9f03a2c4a6df60f1c68ad0a4822c5a6b968f876bd98f4fe7fdbea4462c1f594be04b36ad553fce936c4efccc7a3d769d44463f7c3b7e1a
- SSDEEP 393216:2lFyfLPHiRE5bxVzATzC8WfeIRVlFvlQCcv6QaAu5S4:AUbxlk6lFiPvQP
- TLSH T158F6230AB7929875C8305B7C20286313823E1D434F65AFEB5E967B594E78AF1C5B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.