General
- Target 2026-09-05_859239d91818660d56e414de29829847_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- Sample260907-rt1d9abm6s
- SHA256 c795281a344d8c088bd5b168d449c13ea341c1fbe91d37611e4cc7ffe780c30c
- MD5 859239d91818660d56e414de29829847
- SHA1 7161208fa623f8ed890a63e895b3dddbfd3f20d2
- SHA512 0f9f9a63b53ad7f7b0f77aec5d5f80f019ada55e846ce19fd1677cb96303e50e9908c3c6759776d3970ac5c352b5d5ceedf8418fb35c65392316538a762573f3
- SSDEEP 393216:JK6HiRE5bxUl3KExL3JzATzC8WfeIRVlFvlQCcv6QaAe:AUbxUpKOxk6lFiPve
- TLSH T1B6F62322B79258A2D8749F7C04196303413F2E87DE98AFEF3BD6376D4A715F08976842
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_859239d91818660d56e414de29829847_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_859239d91818660d56e414de29829847_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- SHA256 c795281a344d8c088bd5b168d449c13ea341c1fbe91d37611e4cc7ffe780c30c
- MD5 859239d91818660d56e414de29829847
- SHA1 7161208fa623f8ed890a63e895b3dddbfd3f20d2
- SHA512 0f9f9a63b53ad7f7b0f77aec5d5f80f019ada55e846ce19fd1677cb96303e50e9908c3c6759776d3970ac5c352b5d5ceedf8418fb35c65392316538a762573f3
- SSDEEP 393216:JK6HiRE5bxUl3KExL3JzATzC8WfeIRVlFvlQCcv6QaAe:AUbxUpKOxk6lFiPve
- TLSH T1B6F62322B79258A2D8749F7C04196303413F2E87DE98AFEF3BD6376D4A715F08976842
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.