General
- Target 2026-09-08_b66dfeb4e410b4655909175eec0354fd_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- Sample260910-drs1haej61
- SHA256 e5528ffe7e55048b67857a3e9ac01b05153d45271726bd48c2d1a4e2b2f9d2ff
- MD5 b66dfeb4e410b4655909175eec0354fd
- SHA1 3b11cd36e6eecfb0a744176a8e0f084727ac0d1f
- SHA512 00a0745a71153a99df2a741b543fc47bc354352d6b84bf193932e4b96c8ff1f7fdba13a60c550d77bf08981948f7452a12917c94096af6df6f72ce5139ed707a
- SSDEEP 393216:2lFyfLPHiRE5bxaFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFv0:AUbxaFiPvQ6yhpKOxk6lFc
- TLSH T1E2373305B7A298A5C8301B7C10286313813E1E434F59ABEF5E967B5D4E78AF1C6B3637
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_b66dfeb4e410b4655909175eec0354fd_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_b66dfeb4e410b4655909175eec0354fd_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- SHA256 e5528ffe7e55048b67857a3e9ac01b05153d45271726bd48c2d1a4e2b2f9d2ff
- MD5 b66dfeb4e410b4655909175eec0354fd
- SHA1 3b11cd36e6eecfb0a744176a8e0f084727ac0d1f
- SHA512 00a0745a71153a99df2a741b543fc47bc354352d6b84bf193932e4b96c8ff1f7fdba13a60c550d77bf08981948f7452a12917c94096af6df6f72ce5139ed707a
- SSDEEP 393216:2lFyfLPHiRE5bxaFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFv0:AUbxaFiPvQ6yhpKOxk6lFc
- TLSH T1E2373305B7A298A5C8301B7C10286313813E1E434F59ABEF5E967B5D4E78AF1C6B3637
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.