General
- Target 2026-09-05_958f99a8f65d431d19359895109576d6_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- Sample260907-n3zyashn41
- SHA256 4e89cc48f80bff28a5097e9a15862110b35e8d97c6e32e7dff6cb2016608752c
- MD5 958f99a8f65d431d19359895109576d6
- SHA1 9c5b89d8ce0ca72282b772807055e2145123946b
- SHA512 64fc5d8ea75ef2d2a4a9307f8dea10f6dc64e0022afb6a874c7a1abc9f9082f102508c62ea80e079349b52de115e09e4f3eb96e695991d53eb233a267e32f713
- SSDEEP 393216:2lFyfLPHiRE5bxmDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6Q5:AUbxmyhpKOxk6lFiP5
- TLSH T1E8173319B79298A5C8301B7C20286313813E1E434F65AAEF5F927B5D4E78AF1C9B3537
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_958f99a8f65d431d19359895109576d6_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_958f99a8f65d431d19359895109576d6_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- SHA256 4e89cc48f80bff28a5097e9a15862110b35e8d97c6e32e7dff6cb2016608752c
- MD5 958f99a8f65d431d19359895109576d6
- SHA1 9c5b89d8ce0ca72282b772807055e2145123946b
- SHA512 64fc5d8ea75ef2d2a4a9307f8dea10f6dc64e0022afb6a874c7a1abc9f9082f102508c62ea80e079349b52de115e09e4f3eb96e695991d53eb233a267e32f713
- SSDEEP 393216:2lFyfLPHiRE5bxmDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6Q5:AUbxmyhpKOxk6lFiP5
- TLSH T1E8173319B79298A5C8301B7C20286313813E1E434F65AAEF5F927B5D4E78AF1C9B3537
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.