General
- Target 2026-09-04_9fc4c6d505f06952f0b438701e94326b_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 20.0MB
- Sample260905-b9z6esvbrd
- SHA256 f3808b1b1ec11bb822122154722abcb9e72e1ca139fb7792700b360169a4de3d
- MD5 9fc4c6d505f06952f0b438701e94326b
- SHA1 4c716d58d3b128d27f1d3c1823abfeb53e071ae7
- SHA512 847edab2e64ec3e95635f4d00cf7e905efd961d1b30cad96e259cb9b17db11c93d240782497c53eff0904e1e5f1b20546cc9a6615732daf9bf7546315fa494fd
- SSDEEP 393216:2lFyfLPHiRE5bxoJzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExLW:AUbxKk6lFiPvQ6yhpKOW
- TLSH T137273309B79298A5C8301B7C20286313813E1E434F55AAEF5F967B5D4E78AF1C9B3637
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_9fc4c6d505f06952f0b438701e94326b_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_9fc4c6d505f06952f0b438701e94326b_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 20.0MB
- SHA256 f3808b1b1ec11bb822122154722abcb9e72e1ca139fb7792700b360169a4de3d
- MD5 9fc4c6d505f06952f0b438701e94326b
- SHA1 4c716d58d3b128d27f1d3c1823abfeb53e071ae7
- SHA512 847edab2e64ec3e95635f4d00cf7e905efd961d1b30cad96e259cb9b17db11c93d240782497c53eff0904e1e5f1b20546cc9a6615732daf9bf7546315fa494fd
- SSDEEP 393216:2lFyfLPHiRE5bxoJzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExLW:AUbxKk6lFiPvQ6yhpKOW
- TLSH T137273309B79298A5C8301B7C20286313813E1E434F55AAEF5F967B5D4E78AF1C9B3637
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.