General
- Target 2026-09-07_b597e50128a0db40805ba7b83f9f1ea7_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- Sample260908-jla6dstxev
- SHA256 f613d744bed5939a35fd5c2b22af2363969ff5966855ba79eb44abef37dd2d2a
- MD5 b597e50128a0db40805ba7b83f9f1ea7
- SHA1 8ea1e55d29cb67c01d3b80c63aad9511aa7a4aa5
- SHA512 638fbd711b20eba0bb6bb172d1cb86c46d99d1e26b9f04c771b0063bafcde779263f3a79fe7594eef671c2cc9432bfe84353f3ee5e4bc27ffb02755a69bd5d05
- SSDEEP 393216:2lFyfLPHiRE5bxcFvlQCcv6QaAu5SVDMTNSG/lVrl3Kg:AUbxcFiPvQ6yhpKg
- TLSH T1D9F62305B79298B4C8301B7C2064A313813E1E435F65AAEF5F967B5D4E78AF1C6B3632
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-07_b597e50128a0db40805ba7b83f9f1ea7_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_b597e50128a0db40805ba7b83f9f1ea7_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- SHA256 f613d744bed5939a35fd5c2b22af2363969ff5966855ba79eb44abef37dd2d2a
- MD5 b597e50128a0db40805ba7b83f9f1ea7
- SHA1 8ea1e55d29cb67c01d3b80c63aad9511aa7a4aa5
- SHA512 638fbd711b20eba0bb6bb172d1cb86c46d99d1e26b9f04c771b0063bafcde779263f3a79fe7594eef671c2cc9432bfe84353f3ee5e4bc27ffb02755a69bd5d05
- SSDEEP 393216:2lFyfLPHiRE5bxcFvlQCcv6QaAu5SVDMTNSG/lVrl3Kg:AUbxcFiPvQ6yhpKg
- TLSH T1D9F62305B79298B4C8301B7C2064A313813E1E435F65AAEF5F967B5D4E78AF1C6B3632
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.