General
- Target 2026-09-06_ac559f2e24ddcfe863e94167f6f51e57_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- Sample260906-zbcjgadb92
- SHA256 22718f5713480e7064a983250d11707ffc343fe3557bd595ddef0390e6f25e0c
- MD5 ac559f2e24ddcfe863e94167f6f51e57
- SHA1 dbb8e01126158342388f6dac92a6db5cae2eb67d
- SHA512 2c50e55b72cbda9619086024a6cee5f56a1bc0c2faed5f583cb8dd15afb64dedd62cb20857a5a2f2999ac403baf02a8dd2c946cfec0b580448c69d31774b083d
- SSDEEP 393216:2lFyfLPHiRE5bxBWfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JC:AUbxB6lFiPvQ6yhpKOg
- TLSH T1C4173305B7A298B5C8305B7C10286313813E1E434F55AAEF5F967B5D4A78AF1CAB3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-06_ac559f2e24ddcfe863e94167f6f51e57_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_ac559f2e24ddcfe863e94167f6f51e57_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- SHA256 22718f5713480e7064a983250d11707ffc343fe3557bd595ddef0390e6f25e0c
- MD5 ac559f2e24ddcfe863e94167f6f51e57
- SHA1 dbb8e01126158342388f6dac92a6db5cae2eb67d
- SHA512 2c50e55b72cbda9619086024a6cee5f56a1bc0c2faed5f583cb8dd15afb64dedd62cb20857a5a2f2999ac403baf02a8dd2c946cfec0b580448c69d31774b083d
- SSDEEP 393216:2lFyfLPHiRE5bxBWfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JC:AUbxB6lFiPvQ6yhpKOg
- TLSH T1C4173305B7A298B5C8305B7C10286313813E1E434F55AAEF5F967B5D4A78AF1CAB3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.