General
- Target 2026-09-06_660863e70a623207cbb163c5ca52a6af_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 20.0MB
- Sample260907-cerfgavsdy
- SHA256 e6246c0aedaa8f31880889d2a62d2d1b2a7ed1f6e531140c4fce3e0b0bb9d10f
- MD5 660863e70a623207cbb163c5ca52a6af
- SHA1 848b7c6fe84cae32028368ffd0bb78a6941d6308
- SHA512 d089263bbca5a577db63c60806107ae912504789c2411bb08adc012f5e71da619bf885e6f102a7ab53ab19d1fa342ffa2885b4c71e852e68442521318a48e220
- SSDEEP 393216:2lFyfLPHiRE5bxlDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SF:AUbxlyhpKOxk6lFiPvQK
- TLSH T14B273305B79298A5C8305B7C20286313813E1E434F55AAEF5F967B5D4E78AF1CAB3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-06_660863e70a623207cbb163c5ca52a6af_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_660863e70a623207cbb163c5ca52a6af_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 20.0MB
- SHA256 e6246c0aedaa8f31880889d2a62d2d1b2a7ed1f6e531140c4fce3e0b0bb9d10f
- MD5 660863e70a623207cbb163c5ca52a6af
- SHA1 848b7c6fe84cae32028368ffd0bb78a6941d6308
- SHA512 d089263bbca5a577db63c60806107ae912504789c2411bb08adc012f5e71da619bf885e6f102a7ab53ab19d1fa342ffa2885b4c71e852e68442521318a48e220
- SSDEEP 393216:2lFyfLPHiRE5bxlDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SF:AUbxlyhpKOxk6lFiPvQK
- TLSH T14B273305B79298A5C8305B7C20286313813E1E434F55AAEF5F967B5D4E78AF1CAB3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.