General
- Target 2026-09-03_f2a6a81078dd178895fda5520e75f480_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- Sample260903-xken3sbb86
- SHA256 aa6fefd3a4beb07f8956d457f56199a6a9e30a3d426f20fa12a521592caa645a
- MD5 f2a6a81078dd178895fda5520e75f480
- SHA1 2e52dbd5e137bd8d64d96bbaacd8f0e3930bd838
- SHA512 52794e2a95bfa13afd25a42ddbb915c9068ab29c9cc33abe7c89cb5fc7796650335e3f7ec283de1f4e6e8e1b1a01bc2dd065ab6c58eb5b11ae80bb72d461f79f
- SSDEEP 393216:JK6HiRE5bxmL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/9:AUbx2xk6lFiPvQ6yL
- TLSH T13A173322F79158A6DCB49F3C04196303403E2E87DE98AFEF3ADA376D4A715F08976542
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_f2a6a81078dd178895fda5520e75f480_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_f2a6a81078dd178895fda5520e75f480_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- SHA256 aa6fefd3a4beb07f8956d457f56199a6a9e30a3d426f20fa12a521592caa645a
- MD5 f2a6a81078dd178895fda5520e75f480
- SHA1 2e52dbd5e137bd8d64d96bbaacd8f0e3930bd838
- SHA512 52794e2a95bfa13afd25a42ddbb915c9068ab29c9cc33abe7c89cb5fc7796650335e3f7ec283de1f4e6e8e1b1a01bc2dd065ab6c58eb5b11ae80bb72d461f79f
- SSDEEP 393216:JK6HiRE5bxmL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/9:AUbx2xk6lFiPvQ6yL
- TLSH T13A173322F79158A6DCB49F3C04196303403E2E87DE98AFEF3ADA376D4A715F08976542
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.