General
- Target 2026-09-08_acf04cc08aedf56675882323e4d3f33c_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 20.0MB
- Sample260910-d2x27sx1ct
- SHA256 01fdb4336ddf0f0fc5fe44f133a49d3fef82e591de9ff3f0b2bbe2df8a9a8973
- MD5 acf04cc08aedf56675882323e4d3f33c
- SHA1 ff3ec5a97bb142f69b4fcceda06142080093f402
- SHA512 7329f42d5bb5aa2060eabce9aece76ca4014dadddb9a0297e57068e5c5a782cbd2ed7ec63a2e150b01a3c6762352d565838c5e8773495e13a9b59e4242d36e2b
- SSDEEP 393216:2lFyfLPHiRE5bxDeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8Wm:AUbxdlFiPvQ6yhpKOxkD
- TLSH T1F4273305B79298A5C8305B7C20286313813E1E434F55AAEF5F967B5D4E78AF1CAB3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_acf04cc08aedf56675882323e4d3f33c_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_acf04cc08aedf56675882323e4d3f33c_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 20.0MB
- SHA256 01fdb4336ddf0f0fc5fe44f133a49d3fef82e591de9ff3f0b2bbe2df8a9a8973
- MD5 acf04cc08aedf56675882323e4d3f33c
- SHA1 ff3ec5a97bb142f69b4fcceda06142080093f402
- SHA512 7329f42d5bb5aa2060eabce9aece76ca4014dadddb9a0297e57068e5c5a782cbd2ed7ec63a2e150b01a3c6762352d565838c5e8773495e13a9b59e4242d36e2b
- SSDEEP 393216:2lFyfLPHiRE5bxDeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8Wm:AUbxdlFiPvQ6yhpKOxkD
- TLSH T1F4273305B79298A5C8305B7C20286313813E1E434F55AAEF5F967B5D4E78AF1CAB3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.