General
- Target 2026-09-08_af0bd32fce341058de0a88376ad118c3_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 17.0MB
- Sample260910-d1et8swbmf
- SHA256 763d8c2dcc12cd93edb2bafaa0470b85b50e8947ea59064ecd777191651846c1
- MD5 af0bd32fce341058de0a88376ad118c3
- SHA1 97451827a507e11204bbb13da1ca585b4ec78275
- SHA512 213e8e82d3ec76181f74e2b5441db5487f64c9a7391a109f3cb1a22a4b91879fd1a2c6e5a94b0bc059b0e56d55ac03c5c037c80ddad951dacbf4e96d9c214cd1
- SSDEEP 393216:2lFyfLPHiRE5bxP6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVY:AUbxPPvQ6yhpKOxk6Y
- TLSH T151073305B7929C65C8301B7C20686313813E1E034F55AAEF6F967B5D4E78AF1CAB7632
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_af0bd32fce341058de0a88376ad118c3_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_af0bd32fce341058de0a88376ad118c3_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 17.0MB
- SHA256 763d8c2dcc12cd93edb2bafaa0470b85b50e8947ea59064ecd777191651846c1
- MD5 af0bd32fce341058de0a88376ad118c3
- SHA1 97451827a507e11204bbb13da1ca585b4ec78275
- SHA512 213e8e82d3ec76181f74e2b5441db5487f64c9a7391a109f3cb1a22a4b91879fd1a2c6e5a94b0bc059b0e56d55ac03c5c037c80ddad951dacbf4e96d9c214cd1
- SSDEEP 393216:2lFyfLPHiRE5bxP6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVY:AUbxPPvQ6yhpKOxk6Y
- TLSH T151073305B7929C65C8301B7C20686313813E1E034F55AAEF6F967B5D4E78AF1CAB7632
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.