General
- Target 2026-09-06_7afbc1bef944a08465bb53e81f2f2052_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 20.0MB
- Sample260907-and6dstsdv
- SHA256 c9f0b08fa653ab9352623d77a3015b0237544ca0d9c88f9c9358b012a99952a9
- MD5 7afbc1bef944a08465bb53e81f2f2052
- SHA1 7d5af678327dd6df5f4738cadfc907f2826a1c7a
- SHA512 5a3de07419b9fe253d835b9e5fbcab887b9eab5667abee1e4988246e910964c6e2ecd51bdaab498232ec7c95fd5a530a6c209ca1dd15e78a054aa0f58df2cd10
- SSDEEP 393216:2lFyfLPHiRE5bxDrl3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/l0:AUbxvpKOxk6lFiPvQ6yY
- TLSH T1AE273305B79298A5C8305B7C20286313813E1E434F55AAEF5F967B5D4E78AF1CAB3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-06_7afbc1bef944a08465bb53e81f2f2052_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_7afbc1bef944a08465bb53e81f2f2052_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 20.0MB
- SHA256 c9f0b08fa653ab9352623d77a3015b0237544ca0d9c88f9c9358b012a99952a9
- MD5 7afbc1bef944a08465bb53e81f2f2052
- SHA1 7d5af678327dd6df5f4738cadfc907f2826a1c7a
- SHA512 5a3de07419b9fe253d835b9e5fbcab887b9eab5667abee1e4988246e910964c6e2ecd51bdaab498232ec7c95fd5a530a6c209ca1dd15e78a054aa0f58df2cd10
- SSDEEP 393216:2lFyfLPHiRE5bxDrl3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/l0:AUbxvpKOxk6lFiPvQ6yY
- TLSH T1AE273305B79298A5C8305B7C20286313813E1E434F55AAEF5F967B5D4E78AF1CAB3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.