General
- Target 2026-09-05_71d7fbc89e3aa96792013531234e6b9d_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- Sample260907-we6d6sdp61
- SHA256 b05767fcfcc76e7241d9b7021920547133c39f7c11da73216b2cdfe9b19c4b46
- MD5 71d7fbc89e3aa96792013531234e6b9d
- SHA1 f2c062b7494438ae217a3c55d0ca45e6f28f1bcc
- SHA512 12ec74441600eb3508c31bbcfffab817553ed10b8be0006cfb165e9db18f9e5ae4c9966d6dec44d76985b9529ceaba6c81e19e7126a5960eb114cf87f7d90cf7
- SSDEEP 393216:JK6HiRE5bxGNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcvs:AUbxihpKOxk6lFis
- TLSH T173F62322B79258A2D874AF7C04196303413F2E47DE98ABEF3BD6376D4A715F08977842
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_71d7fbc89e3aa96792013531234e6b9d_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_71d7fbc89e3aa96792013531234e6b9d_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- SHA256 b05767fcfcc76e7241d9b7021920547133c39f7c11da73216b2cdfe9b19c4b46
- MD5 71d7fbc89e3aa96792013531234e6b9d
- SHA1 f2c062b7494438ae217a3c55d0ca45e6f28f1bcc
- SHA512 12ec74441600eb3508c31bbcfffab817553ed10b8be0006cfb165e9db18f9e5ae4c9966d6dec44d76985b9529ceaba6c81e19e7126a5960eb114cf87f7d90cf7
- SSDEEP 393216:JK6HiRE5bxGNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcvs:AUbxihpKOxk6lFis
- TLSH T173F62322B79258A2D874AF7C04196303413F2E47DE98ABEF3BD6376D4A715F08977842
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.