General
- Target 2026-09-09_da4759d49af58e049f4adf03d9456f8a_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 17.0MB
- Sample260910-2rjzlaxbla
- SHA256 fbb3321fe364e95c034b49792fa913a5df3864ae73e1c71c53ebfe89ebd150aa
- MD5 da4759d49af58e049f4adf03d9456f8a
- SHA1 ee8b59db6a74ea570fde099cfb4247191e490e91
- SHA512 34d04c3297aa733d305b00ee7d296a5425234991a3cbfae2a2aeee8fde34d0df558dd1f74ef35530998e78347d53bf6b6ce7f2415ba6ce3dd762c189e16ce93b
- SSDEEP 393216:2lFyfLPHiRE5bxAL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDM5:AUbxsxk6lFiPvQ6a
- TLSH T11F073306B7929975C8301B7C20286313413E1E434F69AAEF5E967B5D4E78AF1C9B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_da4759d49af58e049f4adf03d9456f8a_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_da4759d49af58e049f4adf03d9456f8a_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 17.0MB
- SHA256 fbb3321fe364e95c034b49792fa913a5df3864ae73e1c71c53ebfe89ebd150aa
- MD5 da4759d49af58e049f4adf03d9456f8a
- SHA1 ee8b59db6a74ea570fde099cfb4247191e490e91
- SHA512 34d04c3297aa733d305b00ee7d296a5425234991a3cbfae2a2aeee8fde34d0df558dd1f74ef35530998e78347d53bf6b6ce7f2415ba6ce3dd762c189e16ce93b
- SSDEEP 393216:2lFyfLPHiRE5bxAL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDM5:AUbxsxk6lFiPvQ6a
- TLSH T11F073306B7929975C8301B7C20286313413E1E434F69AAEF5E967B5D4E78AF1C9B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.