General
- Target 2026-09-08_bdfe4a529cc7ae51370320c1bec387ad_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- Sample260910-dkkqjsdq8z
- SHA256 8a93c572cd3212594cf681f2db56f2807f200cefd596ebf187d1b7cf467a4208
- MD5 bdfe4a529cc7ae51370320c1bec387ad
- SHA1 2eea5511f50501b09c6712b12c1627d28bcebd38
- SHA512 8e8d15a32c97981d7b12e9f60d23fe27ec162adef33b1ef6779cf92ed1eb4cb2ec9dc2de8ee928b8707c4c2e3d6a7ef55a1382e7985efdac5d2431e11bc47bc5
- SSDEEP 393216:JK6HiRE5bx4WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRV2:AUbx46lFiPvQ6yhpKOxk62
- TLSH T1B5373322B79158A2DC749F7C04196303413F2E47CE98AFEF3BD637A949B15F089B6942
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_bdfe4a529cc7ae51370320c1bec387ad_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_bdfe4a529cc7ae51370320c1bec387ad_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- SHA256 8a93c572cd3212594cf681f2db56f2807f200cefd596ebf187d1b7cf467a4208
- MD5 bdfe4a529cc7ae51370320c1bec387ad
- SHA1 2eea5511f50501b09c6712b12c1627d28bcebd38
- SHA512 8e8d15a32c97981d7b12e9f60d23fe27ec162adef33b1ef6779cf92ed1eb4cb2ec9dc2de8ee928b8707c4c2e3d6a7ef55a1382e7985efdac5d2431e11bc47bc5
- SSDEEP 393216:JK6HiRE5bx4WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRV2:AUbx46lFiPvQ6yhpKOxk62
- TLSH T1B5373322B79158A2DC749F7C04196303413F2E47CE98AFEF3BD637A949B15F089B6942
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.