General
- Target 2026-09-01_0131e17b3947bef95156e6b13b8f98b3_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 20.0MB
- Sample260903-vsbw2ssbqb
- SHA256 18d313408f5a5ae9f74a9f302972b24241e79e6ccab9c030e3a96bddb6c275ba
- MD5 0131e17b3947bef95156e6b13b8f98b3
- SHA1 dda2618c851523df2d473ccb1e12aab6efaf16df
- SHA512 1154256d312a0509cabf515bff3ccea29b41c980f8b03ab9e6fe75ad9612669f2a6595b27fae6a8a9b3b44b40aef669fdc6746cce86f9ad2842789aa8098acf8
- SSDEEP 393216:JK6HiRE5bx+l3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/l5:AUbx+pKOxk6lFiPvQ6yl
- TLSH T136273322B79258A6DC749F3C04196303403F2E47DE98AFEF3BD637694A715F089B6942
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-01_0131e17b3947bef95156e6b13b8f98b3_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-01_0131e17b3947bef95156e6b13b8f98b3_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 20.0MB
- SHA256 18d313408f5a5ae9f74a9f302972b24241e79e6ccab9c030e3a96bddb6c275ba
- MD5 0131e17b3947bef95156e6b13b8f98b3
- SHA1 dda2618c851523df2d473ccb1e12aab6efaf16df
- SHA512 1154256d312a0509cabf515bff3ccea29b41c980f8b03ab9e6fe75ad9612669f2a6595b27fae6a8a9b3b44b40aef669fdc6746cce86f9ad2842789aa8098acf8
- SSDEEP 393216:JK6HiRE5bx+l3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/l5:AUbx+pKOxk6lFiPvQ6yl
- TLSH T136273322B79258A6DC749F3C04196303403F2E47DE98AFEF3BD637694A715F089B6942
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.