General
- Target 2026-09-08_66ddc119c763d21a7c9546765bfcaebb_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- Sample260908-ttmt9sem81
- SHA256 5bf349f1fb1056a512bee981a0fa465beb59856655b2009d955a11f347412570
- MD5 66ddc119c763d21a7c9546765bfcaebb
- SHA1 bad4ec1de60491a9d9bef49827689fc7a01f11d3
- SHA512 cc8a478e49596a6b74fea1be46a3ca5032587834cf5c4f56132f27ca45b3f8cc88be2fe286add7d95a74278a870b2b74584870353681d3fecaeb60820960b5f7
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxJsJcQvQaT0u5SHvOYDMVByQyVG/uzGNS:2lFyfLPHiRE5bxR6QaAu5SVDMTNSG/lS
- TLSH T1AAB62305B79298B5C8301B7C2068A313813E1E434F656AEF5F967B5D4E78AF1C6B3632
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_66ddc119c763d21a7c9546765bfcaebb_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_66ddc119c763d21a7c9546765bfcaebb_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- SHA256 5bf349f1fb1056a512bee981a0fa465beb59856655b2009d955a11f347412570
- MD5 66ddc119c763d21a7c9546765bfcaebb
- SHA1 bad4ec1de60491a9d9bef49827689fc7a01f11d3
- SHA512 cc8a478e49596a6b74fea1be46a3ca5032587834cf5c4f56132f27ca45b3f8cc88be2fe286add7d95a74278a870b2b74584870353681d3fecaeb60820960b5f7
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxJsJcQvQaT0u5SHvOYDMVByQyVG/uzGNS:2lFyfLPHiRE5bxR6QaAu5SVDMTNSG/lS
- TLSH T1AAB62305B79298B5C8301B7C2068A313813E1E434F656AEF5F967B5D4E78AF1C6B3632
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.