General
- Target 2026-09-04_4bcca2365fa2f5640911663eac00bb09_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- Sample260905-npys3sbm6t
- SHA256 2144e80efa55213331578d997d060ed3166f7729e13b5d0703dfed0fe44f4b60
- MD5 4bcca2365fa2f5640911663eac00bb09
- SHA1 2cd4c051dad144c8752cc4876408e2531a687e18
- SHA512 4730c4c1016390feae59b7c19fb7e5bba76dfe0329106f6d6ede20a527a9dc79654ce0b51b9339f17afecff98048c505e1b8487b1ab841bbb89e0e120fabd32f
- SSDEEP 393216:2lFyfLPHiRE5bxPL3JzATzC8WfeIRVlFvlQCcv6QaAu5Sh:AUbxjxk6lFiPvQy
- TLSH T1F6F6330AF7929965C8301B7C20286313813E1D434F65AAEF5E967B5D4E78AF1C9B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_4bcca2365fa2f5640911663eac00bb09_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_4bcca2365fa2f5640911663eac00bb09_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- SHA256 2144e80efa55213331578d997d060ed3166f7729e13b5d0703dfed0fe44f4b60
- MD5 4bcca2365fa2f5640911663eac00bb09
- SHA1 2cd4c051dad144c8752cc4876408e2531a687e18
- SHA512 4730c4c1016390feae59b7c19fb7e5bba76dfe0329106f6d6ede20a527a9dc79654ce0b51b9339f17afecff98048c505e1b8487b1ab841bbb89e0e120fabd32f
- SSDEEP 393216:2lFyfLPHiRE5bxPL3JzATzC8WfeIRVlFvlQCcv6QaAu5Sh:AUbxjxk6lFiPvQy
- TLSH T1F6F6330AF7929965C8301B7C20286313813E1D434F65AAEF5E967B5D4E78AF1C9B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.