General
- Target 2026-09-10_ec49a0cedc023ec4ab4867a3b1242161_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- Sample260910-k4j2patxdz
- SHA256 18651c540b32f580e48d18fb1fae57a55005c0627f4368cbd5f74d1b809d2a42
- MD5 ec49a0cedc023ec4ab4867a3b1242161
- SHA1 d1e9e231d444495f77d76bbd19d2ea5890396a8a
- SHA512 2c7719164d7cc7435b9c39545dac02ccc133aa496f1f6e439b4000234121325fb232fa624e46444004c3430864ba9887b0fd5f9998a11ff22f8a8c317be2b590
- SSDEEP 393216:JK6HiRE5bxMFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfL:AUbxMFiPvQ6yhpKOxku
- TLSH T1D9173322B79158A6DC749F3C0419A303403F2E47CE98AFEF3BDA37694A715F18976942
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_ec49a0cedc023ec4ab4867a3b1242161_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_ec49a0cedc023ec4ab4867a3b1242161_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- SHA256 18651c540b32f580e48d18fb1fae57a55005c0627f4368cbd5f74d1b809d2a42
- MD5 ec49a0cedc023ec4ab4867a3b1242161
- SHA1 d1e9e231d444495f77d76bbd19d2ea5890396a8a
- SHA512 2c7719164d7cc7435b9c39545dac02ccc133aa496f1f6e439b4000234121325fb232fa624e46444004c3430864ba9887b0fd5f9998a11ff22f8a8c317be2b590
- SSDEEP 393216:JK6HiRE5bxMFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfL:AUbxMFiPvQ6yhpKOxku
- TLSH T1D9173322B79158A6DC749F3C0419A303403F2E47CE98AFEF3BDA37694A715F18976942
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.