General
- Target 2026-09-09_72b7dbb0f2b0cd789dc95c8bfdc847d2_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- Sample260909-wejkeadb22
- SHA256 dfedcf3d16278daa45e2f95efe695d583d3d1d4151a54392b1589762b3130dda
- MD5 72b7dbb0f2b0cd789dc95c8bfdc847d2
- SHA1 a757df6652d7ae460cf62a8e6c3bf27dadf86765
- SHA512 62449aafc9f5232ada479ec7bb4f7c0daf2ea0b7aa4598347d563d7962c32937efb79317e9fb6a797ac55ffc8ee806242cfe72b21414db2c6e2b7bf271422130
- SSDEEP 393216:2lFyfLPHiRE5bx0QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WU:AUbx9vQ6yhpKOxkR
- TLSH T16BD62305B792D865C8301B7C2068A313813E1D038F55AAEF5F967B5D4E78AF1CAB3636
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_72b7dbb0f2b0cd789dc95c8bfdc847d2_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_72b7dbb0f2b0cd789dc95c8bfdc847d2_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- SHA256 dfedcf3d16278daa45e2f95efe695d583d3d1d4151a54392b1589762b3130dda
- MD5 72b7dbb0f2b0cd789dc95c8bfdc847d2
- SHA1 a757df6652d7ae460cf62a8e6c3bf27dadf86765
- SHA512 62449aafc9f5232ada479ec7bb4f7c0daf2ea0b7aa4598347d563d7962c32937efb79317e9fb6a797ac55ffc8ee806242cfe72b21414db2c6e2b7bf271422130
- SSDEEP 393216:2lFyfLPHiRE5bx0QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WU:AUbx9vQ6yhpKOxkR
- TLSH T16BD62305B792D865C8301B7C2068A313813E1D038F55AAEF5F967B5D4E78AF1CAB3636
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.