General
- Target 2026-09-06_2f59d5ee073b3ffab41ef6ee8d5f8598_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- Sample260907-ghx5msfa34
- SHA256 8c5101ac2462f909a5e7a5147b5468439c608efd2a3bf227512fb8790620e126
- MD5 2f59d5ee073b3ffab41ef6ee8d5f8598
- SHA1 a60ae5f87f079d43199ff7455bc46abdacb11ccb
- SHA512 ced5a78387e4d1130f634f6b3fd5a4eaa774717cc3ca4033b25a0670e50f88dd5d048e77131f6fa6d255971d23f893d6a958077148f02bde6711f88e4dab1c16
- SSDEEP 393216:2lFyfLPHiRE5bxLIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KE2:AUbxClFiPvQ6yhpKv
- TLSH T1E8F63305B7A298B4C8305B7C10246313813E1E435F65AAEF5F967B5D4E78AF1CAB3632
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-06_2f59d5ee073b3ffab41ef6ee8d5f8598_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_2f59d5ee073b3ffab41ef6ee8d5f8598_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- SHA256 8c5101ac2462f909a5e7a5147b5468439c608efd2a3bf227512fb8790620e126
- MD5 2f59d5ee073b3ffab41ef6ee8d5f8598
- SHA1 a60ae5f87f079d43199ff7455bc46abdacb11ccb
- SHA512 ced5a78387e4d1130f634f6b3fd5a4eaa774717cc3ca4033b25a0670e50f88dd5d048e77131f6fa6d255971d23f893d6a958077148f02bde6711f88e4dab1c16
- SSDEEP 393216:2lFyfLPHiRE5bxLIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KE2:AUbxClFiPvQ6yhpKv
- TLSH T1E8F63305B7A298B4C8305B7C10246313813E1E435F65AAEF5F967B5D4E78AF1CAB3632
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.