General
- Target 2026-09-04_b47ef8b82b9318135684ca770dc72917_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- Sample260904-3rns8aag33
- SHA256 12e5a7c36dba2f8bd74a2371a39085357ed77e15048cd975da039f992c1f48bd
- MD5 b47ef8b82b9318135684ca770dc72917
- SHA1 18efb65ac0f30c4edcaa60b43863a2b1b074df8e
- SHA512 c46b1a0a3d5ab4126952b241d9ccb04bb49d78c52b298c6391693e824d669696d9f33cc14169f0b045641e0c23bdf1ea364e1d2899866614b524c4a4df1709c2
- SSDEEP 393216:2lFyfLPHiRE5bx66QaAu5SVDMTNSG/lVrl3KExL3JzATzC8Wfe:AUbx6PvQ6yhpKOxkX
- TLSH T191F62309B792DD65C8301B7C2068A313813E1D034F55AAEF5F967B594E78AF1CAB3632
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_b47ef8b82b9318135684ca770dc72917_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_b47ef8b82b9318135684ca770dc72917_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- SHA256 12e5a7c36dba2f8bd74a2371a39085357ed77e15048cd975da039f992c1f48bd
- MD5 b47ef8b82b9318135684ca770dc72917
- SHA1 18efb65ac0f30c4edcaa60b43863a2b1b074df8e
- SHA512 c46b1a0a3d5ab4126952b241d9ccb04bb49d78c52b298c6391693e824d669696d9f33cc14169f0b045641e0c23bdf1ea364e1d2899866614b524c4a4df1709c2
- SSDEEP 393216:2lFyfLPHiRE5bx66QaAu5SVDMTNSG/lVrl3KExL3JzATzC8Wfe:AUbx6PvQ6yhpKOxkX
- TLSH T191F62309B792DD65C8301B7C2068A313813E1D034F55AAEF5F967B594E78AF1CAB3632
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.