General
- Target 2026-09-04_9a27701f7b3481fe5df0018615cc55da_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- Sample260905-czcstadm6t
- SHA256 5d0e0e2a880fa9034c96d592fa50af6cc89baa63fda3d64f153284df49978eba
- MD5 9a27701f7b3481fe5df0018615cc55da
- SHA1 af34b30b230f97a15b1059d9ae976a3333738c25
- SHA512 4d74f728df75a4a83a6262828a3e94c8416385fb82ccd200d139572ca79b32dc421107c80e048f9555a1e445293081c0d6e92039bcf6bb57bc3fce62f1024787
- SSDEEP 393216:2lFyfLPHiRE5bxLDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCci:AUbxLyhpKOxk6lFt
- TLSH T19EF63319B792D8A5C8302B7C20686313813E1E034F65AAEF5E927B5D4E78AF1C5B3537
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_9a27701f7b3481fe5df0018615cc55da_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_9a27701f7b3481fe5df0018615cc55da_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- SHA256 5d0e0e2a880fa9034c96d592fa50af6cc89baa63fda3d64f153284df49978eba
- MD5 9a27701f7b3481fe5df0018615cc55da
- SHA1 af34b30b230f97a15b1059d9ae976a3333738c25
- SHA512 4d74f728df75a4a83a6262828a3e94c8416385fb82ccd200d139572ca79b32dc421107c80e048f9555a1e445293081c0d6e92039bcf6bb57bc3fce62f1024787
- SSDEEP 393216:2lFyfLPHiRE5bxLDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCci:AUbxLyhpKOxk6lFt
- TLSH T19EF63319B792D8A5C8302B7C20686313813E1E034F65AAEF5E927B5D4E78AF1C5B3537
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.