General
- Target 2026-09-06_8795a03338e15e4ef612589008f98386_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- Sample260906-3ckg9avbja
- SHA256 a365db7fea45093406a4051ba216a7b5311e579c667f0e6d891776597a37b18b
- MD5 8795a03338e15e4ef612589008f98386
- SHA1 db3327a0b1be8a0c1af3800bec2fcd3564387a1c
- SHA512 90e06507f7c32d025397cb5a390d3679902b7ff94bd4dadad7f7799ef59a8ea6a94f71fcbecec1a580a2caba183aba236481a0dd79406836a7a8ae53335379b5
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxSNVyAl3K8fCGnbP3JzATC4C8WfszNpx:2lFyfLPHiRE5bxWVrl3KExL3JzATzC8P
- TLSH T1E4B6230AB792DD65C8302B7C20686317813E1D034F65AAEF5E927B5D4E78AF1C9B3532
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-06_8795a03338e15e4ef612589008f98386_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_8795a03338e15e4ef612589008f98386_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- SHA256 a365db7fea45093406a4051ba216a7b5311e579c667f0e6d891776597a37b18b
- MD5 8795a03338e15e4ef612589008f98386
- SHA1 db3327a0b1be8a0c1af3800bec2fcd3564387a1c
- SHA512 90e06507f7c32d025397cb5a390d3679902b7ff94bd4dadad7f7799ef59a8ea6a94f71fcbecec1a580a2caba183aba236481a0dd79406836a7a8ae53335379b5
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxSNVyAl3K8fCGnbP3JzATC4C8WfszNpx:2lFyfLPHiRE5bxWVrl3KExL3JzATzC8P
- TLSH T1E4B6230AB792DD65C8302B7C20686317813E1D034F65AAEF5E927B5D4E78AF1C9B3532
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.