General
- Target 2026-09-08_71761848e0e418c74098f79683de1290_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 20.0MB
- Sample260908-tcsn7atfja
- SHA256 3c0022ea34b3db5a281de087aec4296b669dc4ebfc930d40a28298baaaa7df18
- MD5 71761848e0e418c74098f79683de1290
- SHA1 13a51b3c177a454a9bee5896ca2730da33c35c83
- SHA512 ac6f475b2f664c9b52ce990ea67b1bb3d7eebf13b9483eada15a9c754fe9132b3f321f8691e17f0a1a1500eb7a0c107a8141673b56e23d5be5cae68a16cce2a6
- SSDEEP 393216:2lFyfLPHiRE5bx9QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv7:AUbx6vQ6yhpKOxk6lFi7
- TLSH T103273309B79298A5C8301B7C20286313813E1E434F55AAEF5F967B5D4E78AF1C9B3637
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_71761848e0e418c74098f79683de1290_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_71761848e0e418c74098f79683de1290_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 20.0MB
- SHA256 3c0022ea34b3db5a281de087aec4296b669dc4ebfc930d40a28298baaaa7df18
- MD5 71761848e0e418c74098f79683de1290
- SHA1 13a51b3c177a454a9bee5896ca2730da33c35c83
- SHA512 ac6f475b2f664c9b52ce990ea67b1bb3d7eebf13b9483eada15a9c754fe9132b3f321f8691e17f0a1a1500eb7a0c107a8141673b56e23d5be5cae68a16cce2a6
- SSDEEP 393216:2lFyfLPHiRE5bx9QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv7:AUbx6vQ6yhpKOxk6lFi7
- TLSH T103273309B79298A5C8301B7C20286313813E1E434F55AAEF5F967B5D4E78AF1C9B3637
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.