General
- Target 2026-09-05_6128bb7a6fb4e2a53efa051727bffd9a_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 11.0MB
- Sample260907-y6vg4abc35
- SHA256 8ab44364d883b8ad63a36a2e0607abdba21aa2100b18fadc01c72a1064c2cb87
- MD5 6128bb7a6fb4e2a53efa051727bffd9a
- SHA1 a5b4b222b471982ed97bb44e9d9425a3fea482e2
- SHA512 d819b4fb7cff8847644004254b19c8babdfb9e96e518ac01043051539b961339542b8a4b4bb17111eb931cd3ea70ee6b07578e88400ee7657bc9f4bd421475a4
- SSDEEP 196608:JZ872k1AeAi2KOld5bxRDLlQCcHsJcQvQaT0u5SHvOYDMVB+:JK6HiRE5bx5lQCcv6QaAu5SVDMT+
- TLSH T1A2C62312F79158A6DC749F3C0019A303403E2E87DE98AFEF2BDA376A4A715F08977552
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_6128bb7a6fb4e2a53efa051727bffd9a_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_6128bb7a6fb4e2a53efa051727bffd9a_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 11.0MB
- SHA256 8ab44364d883b8ad63a36a2e0607abdba21aa2100b18fadc01c72a1064c2cb87
- MD5 6128bb7a6fb4e2a53efa051727bffd9a
- SHA1 a5b4b222b471982ed97bb44e9d9425a3fea482e2
- SHA512 d819b4fb7cff8847644004254b19c8babdfb9e96e518ac01043051539b961339542b8a4b4bb17111eb931cd3ea70ee6b07578e88400ee7657bc9f4bd421475a4
- SSDEEP 196608:JZ872k1AeAi2KOld5bxRDLlQCcHsJcQvQaT0u5SHvOYDMVB+:JK6HiRE5bx5lQCcv6QaAu5SVDMT+
- TLSH T1A2C62312F79158A6DC749F3C0019A303403E2E87DE98AFEF2BDA376A4A715F08977552
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.