General
- Target 2026-09-08_c59a0a6ed3b1c88ed158adcd08b2699c_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 11.0MB
- Sample260910-dc2n4axsdt
- SHA256 cf4e5aa3c3b5d339b25d4ca6fa513779cb3b9019ec1910d95eb5eb880993c3ca
- MD5 c59a0a6ed3b1c88ed158adcd08b2699c
- SHA1 1d9da79c340661cf63962e2a58f6e0d3e0b0c9d1
- SHA512 ce6b7e9755f210a221cb437022b0c3a3d5f80d821a9fb44969b462c1989e5641547b92d781ced0087e6d4e6c693acbdbc0c09fee1359bdd47ed62487f4260d51
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxkQvQaT0u5SHvOYDMVByQyVG/uzGNVyAl3K8K:2lFyfLPHiRE5bxk6QaAu5SVDMTNSG/lq
- TLSH T1ABC62305B7929CB5C8305B7C2064A313813E1D034F55AAEF5F967B594E78AF1CAB3632
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_c59a0a6ed3b1c88ed158adcd08b2699c_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_c59a0a6ed3b1c88ed158adcd08b2699c_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 11.0MB
- SHA256 cf4e5aa3c3b5d339b25d4ca6fa513779cb3b9019ec1910d95eb5eb880993c3ca
- MD5 c59a0a6ed3b1c88ed158adcd08b2699c
- SHA1 1d9da79c340661cf63962e2a58f6e0d3e0b0c9d1
- SHA512 ce6b7e9755f210a221cb437022b0c3a3d5f80d821a9fb44969b462c1989e5641547b92d781ced0087e6d4e6c693acbdbc0c09fee1359bdd47ed62487f4260d51
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxkQvQaT0u5SHvOYDMVByQyVG/uzGNVyAl3K8K:2lFyfLPHiRE5bxk6QaAu5SVDMTNSG/lq
- TLSH T1ABC62305B7929CB5C8305B7C2064A313813E1D034F55AAEF5F967B594E78AF1CAB3632
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.