General
- Target 2026-09-08_e0663fa580c4f856968536b78da87647_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- Sample260908-ncmv2sal8s
- SHA256 ffa08990947b84850ca2926abe21f1e72e7dbc56c506c453c3808b5863222231
- MD5 e0663fa580c4f856968536b78da87647
- SHA1 809e6687fbb8715e19a9985d6590c9298cccca50
- SHA512 3c4f418aab753b919979c57ef36dc75a0d0b9a1b3bae1364bcaca167000226dde1711d998c63f8b55bdc42efa24f9d3455e008511089b0cb4ff700469ac2adee
- SSDEEP 393216:2lFyfLPHiRE5bxSFvlQCcv6QaAu5SVDMTNSv:AUbxSFiPvQ6ym
- TLSH T13FD62305B7A298B5C8301B7C2024A313813E1E435F65AAEF5E967B5D4E78AF1C5B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_e0663fa580c4f856968536b78da87647_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_e0663fa580c4f856968536b78da87647_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- SHA256 ffa08990947b84850ca2926abe21f1e72e7dbc56c506c453c3808b5863222231
- MD5 e0663fa580c4f856968536b78da87647
- SHA1 809e6687fbb8715e19a9985d6590c9298cccca50
- SHA512 3c4f418aab753b919979c57ef36dc75a0d0b9a1b3bae1364bcaca167000226dde1711d998c63f8b55bdc42efa24f9d3455e008511089b0cb4ff700469ac2adee
- SSDEEP 393216:2lFyfLPHiRE5bxSFvlQCcv6QaAu5SVDMTNSv:AUbxSFiPvQ6ym
- TLSH T13FD62305B7A298B5C8301B7C2024A313813E1E435F65AAEF5E967B5D4E78AF1C5B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.