General
- Target 2026-09-10_e6db8ad388e782a45eeffc419754ffcf_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- Sample260910-lc9npsam91
- SHA256 43deb7d7bea807ce4340bfbc8e5b2aa298629d0dbf5dd318d44878a6634a9b82
- MD5 e6db8ad388e782a45eeffc419754ffcf
- SHA1 44f447b5856e8533c63ec497d29275f9d764348b
- SHA512 b77a854d6341e3b30841ed27365b118bd84d041c18c0d21ad143c1e8a490264daacd01eaa743fccf552afba48a8ece0f41dc789b9262bc4260616f4d63256fdb
- SSDEEP 393216:2lFyfLPHiRE5bxjlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzAm:AUbx+PvQ6yhpKOxV
- TLSH T145E62309B7A298A5C8305B7C20686313813E1E034F55AAEF5F967B5D4E78AF1C5B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_e6db8ad388e782a45eeffc419754ffcf_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_e6db8ad388e782a45eeffc419754ffcf_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- SHA256 43deb7d7bea807ce4340bfbc8e5b2aa298629d0dbf5dd318d44878a6634a9b82
- MD5 e6db8ad388e782a45eeffc419754ffcf
- SHA1 44f447b5856e8533c63ec497d29275f9d764348b
- SHA512 b77a854d6341e3b30841ed27365b118bd84d041c18c0d21ad143c1e8a490264daacd01eaa743fccf552afba48a8ece0f41dc789b9262bc4260616f4d63256fdb
- SSDEEP 393216:2lFyfLPHiRE5bxjlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzAm:AUbx+PvQ6yhpKOxV
- TLSH T145E62309B7A298A5C8305B7C20686313813E1E034F55AAEF5F967B5D4E78AF1C5B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.