General
- Target 2026-09-07_df5ee4cfa56672c5d8ca66338edca359_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 11.0MB
- Sample260908-ebtsjacg97
- SHA256 02ec11e317522dd897e8690b1d80c41bde5f306bff495cdbda0510afaca62d97
- MD5 df5ee4cfa56672c5d8ca66338edca359
- SHA1 5f3b7c8bdd408f76dc4c1d71b2f365f28d7a6825
- SHA512 590e653ca8c63a01010626fbc653d64b5c04e13680209643c648d31c7e88e64ec2e3bd42cdad54a4f245d1441c088765499278346dcdfdbf724b2202715075ad
- SSDEEP 196608:JZ872k1AeAi2KOld5bxRWlQCcHsJcQvQaT0u5SHvOYDMVByQyVGC:JK6HiRE5bx4lQCcv6QaAu5SVDMTNSGC
- TLSH T1C6C62312F39158A6DC749F7C0019A303403E2E87DE98AFEF2BDA37694A715F18977912
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-07_df5ee4cfa56672c5d8ca66338edca359_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_df5ee4cfa56672c5d8ca66338edca359_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 11.0MB
- SHA256 02ec11e317522dd897e8690b1d80c41bde5f306bff495cdbda0510afaca62d97
- MD5 df5ee4cfa56672c5d8ca66338edca359
- SHA1 5f3b7c8bdd408f76dc4c1d71b2f365f28d7a6825
- SHA512 590e653ca8c63a01010626fbc653d64b5c04e13680209643c648d31c7e88e64ec2e3bd42cdad54a4f245d1441c088765499278346dcdfdbf724b2202715075ad
- SSDEEP 196608:JZ872k1AeAi2KOld5bxRWlQCcHsJcQvQaT0u5SHvOYDMVByQyVGC:JK6HiRE5bx4lQCcv6QaAu5SVDMTNSGC
- TLSH T1C6C62312F39158A6DC749F7C0019A303403E2E87DE98AFEF2BDA37694A715F18977912
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.