General
- Target 2026-09-08_900feefba76cc08cca01f4e61ee4c373_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- Sample260910-eqqpesxbnf
- SHA256 66a569cf2afb8b994a2e21847c7bfa768d50c912af22da7edd40787de2bd205c
- MD5 900feefba76cc08cca01f4e61ee4c373
- SHA1 31788848a60c7e45744db014e6e37b94db084b73
- SHA512 e873bf003750ab183c579ea98275ae3c06cc2f614d120e513c1da0974233662e0bb6a1afa91394b0b22cce78d29c440cde6ba3a33d7c356df73037bf02ea4427
- SSDEEP 393216:2lFyfLPHiRE5bx3FvlQCcv6QaAu5SVDMTNSG/lVf:AUbx3FiPvQ6yN
- TLSH T169D62305B7A298B5C8301B7C20246313813E1E435F65AAEF5F967B594E38AF1C6B3637
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_900feefba76cc08cca01f4e61ee4c373_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_900feefba76cc08cca01f4e61ee4c373_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- SHA256 66a569cf2afb8b994a2e21847c7bfa768d50c912af22da7edd40787de2bd205c
- MD5 900feefba76cc08cca01f4e61ee4c373
- SHA1 31788848a60c7e45744db014e6e37b94db084b73
- SHA512 e873bf003750ab183c579ea98275ae3c06cc2f614d120e513c1da0974233662e0bb6a1afa91394b0b22cce78d29c440cde6ba3a33d7c356df73037bf02ea4427
- SSDEEP 393216:2lFyfLPHiRE5bx3FvlQCcv6QaAu5SVDMTNSG/lVf:AUbx3FiPvQ6yN
- TLSH T169D62305B7A298B5C8301B7C20246313813E1E435F65AAEF5F967B594E38AF1C6B3637
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.