General
- Target 2026-09-08_f3e2cd49cccc13ae9d68013249e5fc3d_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- Sample260910-b23lkscm3s
- SHA256 e320212e2e3cdba76954a23c46d92cb85b19496b4e4198fcffee79c2107199e8
- MD5 f3e2cd49cccc13ae9d68013249e5fc3d
- SHA1 cad61789207fd639a2601558db1252cf9cdf9370
- SHA512 0159005d2237f067c81ba4ed0c6af496e6fe89afe6e96e45e5d4c957cbc4e62c06c091485150a4ad5114489748dd630988ec73b26799c1cc691f2a94c1ad2729
- SSDEEP 393216:2lFyfLPHiRE5bx/FvlQCcv6QaAu5SVDMTNSG/lV0:AUbx/FiPvQ6yi
- TLSH T1E5D62309F79298B5C8301B7C20246313813E1E435F65AAEF5F967B194E78AF1C6B3636
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_f3e2cd49cccc13ae9d68013249e5fc3d_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_f3e2cd49cccc13ae9d68013249e5fc3d_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- SHA256 e320212e2e3cdba76954a23c46d92cb85b19496b4e4198fcffee79c2107199e8
- MD5 f3e2cd49cccc13ae9d68013249e5fc3d
- SHA1 cad61789207fd639a2601558db1252cf9cdf9370
- SHA512 0159005d2237f067c81ba4ed0c6af496e6fe89afe6e96e45e5d4c957cbc4e62c06c091485150a4ad5114489748dd630988ec73b26799c1cc691f2a94c1ad2729
- SSDEEP 393216:2lFyfLPHiRE5bx/FvlQCcv6QaAu5SVDMTNSG/lV0:AUbx/FiPvQ6yi
- TLSH T1E5D62309F79298B5C8301B7C20246313813E1E435F65AAEF5F967B194E78AF1C6B3636
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.