General
- Target 2026-09-05_8f9e3ac630b51956c3c9dd46a820bd8a_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- Sample260907-p7wbcaam3v
- SHA256 5780fbd8179a27198d050135d4b81b18368e1bf424a31ea9395671f428e0ce69
- MD5 8f9e3ac630b51956c3c9dd46a820bd8a
- SHA1 1503f5a1f611fc78b6a7c2952aa0f5e965d35f89
- SHA512 2b82e8882f6246de249064930bb934108a8bf08fe90a45a1292f71311c9e2d1b3048bc98bf5376b01cb7615f6ab9e698cf8748bbc197c075ea5696076a5a0514
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxkWfszNpiRVxK65DzLl/:2lFyfLPHiRE5bxkWfeIRVlFvl/
- TLSH T160B6230AB7929875C8302B7C20246317823E1E434F65AFEF5E967B5D4A78AF0C5B3572
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_8f9e3ac630b51956c3c9dd46a820bd8a_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_8f9e3ac630b51956c3c9dd46a820bd8a_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- SHA256 5780fbd8179a27198d050135d4b81b18368e1bf424a31ea9395671f428e0ce69
- MD5 8f9e3ac630b51956c3c9dd46a820bd8a
- SHA1 1503f5a1f611fc78b6a7c2952aa0f5e965d35f89
- SHA512 2b82e8882f6246de249064930bb934108a8bf08fe90a45a1292f71311c9e2d1b3048bc98bf5376b01cb7615f6ab9e698cf8748bbc197c075ea5696076a5a0514
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxkWfszNpiRVxK65DzLl/:2lFyfLPHiRE5bxkWfeIRVlFvl/
- TLSH T160B6230AB7929875C8302B7C20246317823E1E434F65AFEF5E967B5D4A78AF0C5B3572
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.