General
- Target 2026-09-09_d48de87a01e28a487e09fe967adcc757_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- Sample260910-21kx9axcjb
- SHA256 ce7f81e103fd75e6421c9d1339e725cc81b6007c3e7bbf52e4fa391acf5909af
- MD5 d48de87a01e28a487e09fe967adcc757
- SHA1 8071b8b5c6dde9a812a23fc0ac5030b0e6ba7821
- SHA512 ce7d8dc54d1f20f504f8ba6a927dfddb60bc6a0efdd5198129a390616a4a3adf66369172c7286c1e5ef15b92a49923b1cccdff8d4217843a2733038436267a19
- SSDEEP 393216:2lFyfLPHiRE5bxqL3JzATzC8WfeIRVlFvlQCcv6QaAu5SM:AUbxixk6lFiPvQD
- TLSH T1F3F6230AF7929865C8306B7C20286317823E1D434F65AAEF5E927B5D4E78AF1C5B3533
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_d48de87a01e28a487e09fe967adcc757_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_d48de87a01e28a487e09fe967adcc757_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- SHA256 ce7f81e103fd75e6421c9d1339e725cc81b6007c3e7bbf52e4fa391acf5909af
- MD5 d48de87a01e28a487e09fe967adcc757
- SHA1 8071b8b5c6dde9a812a23fc0ac5030b0e6ba7821
- SHA512 ce7d8dc54d1f20f504f8ba6a927dfddb60bc6a0efdd5198129a390616a4a3adf66369172c7286c1e5ef15b92a49923b1cccdff8d4217843a2733038436267a19
- SSDEEP 393216:2lFyfLPHiRE5bxqL3JzATzC8WfeIRVlFvlQCcv6QaAu5SM:AUbxixk6lFiPvQD
- TLSH T1F3F6230AF7929865C8306B7C20286317823E1D434F65AAEF5E927B5D4E78AF1C5B3533
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.