General
- Target 2026-09-06_94e5b66f3aa337860336b6d069282295_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- Sample260906-173afatenc
- SHA256 0182b000a5bfe4d279f85e33ad69ac44bfbe1170599251ba95a95d862e446503
- MD5 94e5b66f3aa337860336b6d069282295
- SHA1 9cb5a4431c132f504e2bb29c395e625fc43d907b
- SHA512 5613de6d456d83f835fa4509d76395d079f24fff86e37daf3bed7a617154537f56bb357e51b013462d2bb7612ab24627039eee895a581cc0677164341cc2d661
- SSDEEP 393216:2lFyfLPHiRE5bxJC8WfeIRVlFvlQCcv6QaA/:AUbx/6lFiPv/
- TLSH T1DCD6230AB7929865C8302B7C20286317823E1D434F65AEEF5E967B5D4E78AF0C5B3573
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-06_94e5b66f3aa337860336b6d069282295_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_94e5b66f3aa337860336b6d069282295_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- SHA256 0182b000a5bfe4d279f85e33ad69ac44bfbe1170599251ba95a95d862e446503
- MD5 94e5b66f3aa337860336b6d069282295
- SHA1 9cb5a4431c132f504e2bb29c395e625fc43d907b
- SHA512 5613de6d456d83f835fa4509d76395d079f24fff86e37daf3bed7a617154537f56bb357e51b013462d2bb7612ab24627039eee895a581cc0677164341cc2d661
- SSDEEP 393216:2lFyfLPHiRE5bxJC8WfeIRVlFvlQCcv6QaA/:AUbx/6lFiPv/
- TLSH T1DCD6230AB7929865C8302B7C20286317823E1D434F65AEEF5E967B5D4E78AF0C5B3573
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.