General
- Target 2026-09-05_6ca3bdf0ef0684febe53417a4cbb1fac_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- Sample260907-xa9fps1yct
- SHA256 8d04a4c95ee44f5c8976900b4262887a9aaadbdb5e34103dae121b0f8a46ee77
- MD5 6ca3bdf0ef0684febe53417a4cbb1fac
- SHA1 2cb4e3b45bd3d50aa4dc133734723828e2361d76
- SHA512 4de2ef75460ef4d20c20185170970dda9eeedbb826fd8ce326719a96150c19db1a1f4b0e7d309473462ea0826dc006caf76ce953d2191c294bc30e05c247cff1
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxzzLlQCcHsJcQvQaT0u5SHvOr:2lFyfLPHiRE5bxzvlQCcv6QaAu5Sc
- TLSH T131B6230AB79299B5C8301B7C20246313813E1E435F65AEEB5E967B1D4E78AF1C5B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_6ca3bdf0ef0684febe53417a4cbb1fac_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_6ca3bdf0ef0684febe53417a4cbb1fac_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- SHA256 8d04a4c95ee44f5c8976900b4262887a9aaadbdb5e34103dae121b0f8a46ee77
- MD5 6ca3bdf0ef0684febe53417a4cbb1fac
- SHA1 2cb4e3b45bd3d50aa4dc133734723828e2361d76
- SHA512 4de2ef75460ef4d20c20185170970dda9eeedbb826fd8ce326719a96150c19db1a1f4b0e7d309473462ea0826dc006caf76ce953d2191c294bc30e05c247cff1
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxzzLlQCcHsJcQvQaT0u5SHvOr:2lFyfLPHiRE5bxzvlQCcv6QaAu5Sc
- TLSH T131B6230AB79299B5C8301B7C20246313813E1E435F65AEEB5E967B1D4E78AF1C5B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.