General
- Target 2026-09-05_7d244c86224eb773b942575f00c980ad_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- Sample260907-tbzfcazfkc
- SHA256 5b67b56c596a216f647b0ad049bd08345ecad9f1e8b7977b069ff4ab51480297
- MD5 7d244c86224eb773b942575f00c980ad
- SHA1 ae3b35171ed12af026f13464a08a03849d2e5041
- SHA512 23ac043a1b2c0df3da6e1668289799d541a85375e2a17ffde3c08f8b6e81052506f80144c6c4884d528146e5ae6e805cd3404563ddb54c6c536d89500ad02c10
- SSDEEP 393216:2lFyfLPHiRE5bxQlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVj:AUbxfPvQ6yhpKOxk6j
- TLSH T16D173309B7929865C8301B7C20686313813E1E034F65AAEF5F967B5D4E78AF1C9B3637
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_7d244c86224eb773b942575f00c980ad_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_7d244c86224eb773b942575f00c980ad_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- SHA256 5b67b56c596a216f647b0ad049bd08345ecad9f1e8b7977b069ff4ab51480297
- MD5 7d244c86224eb773b942575f00c980ad
- SHA1 ae3b35171ed12af026f13464a08a03849d2e5041
- SHA512 23ac043a1b2c0df3da6e1668289799d541a85375e2a17ffde3c08f8b6e81052506f80144c6c4884d528146e5ae6e805cd3404563ddb54c6c536d89500ad02c10
- SSDEEP 393216:2lFyfLPHiRE5bxQlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVj:AUbxfPvQ6yhpKOxk6j
- TLSH T16D173309B7929865C8301B7C20686313813E1E034F65AAEF5F967B5D4E78AF1C9B3637
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.