General
- Target 2026-09-10_c546bac06f10a99aac2ee18922ed5a4d_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 11.0MB
- Sample260910-myzlassapa
- SHA256 bd001becd863bb52da3cb54bfe1772f63ef724daa0ffc9e5b70147a28760faf9
- MD5 c546bac06f10a99aac2ee18922ed5a4d
- SHA1 3a4abae534f6ee1f3dc0353c963e9783d04ab941
- SHA512 01bede73b961c79efa68f336fb891ce78e551692252b5fe4f9b72dae32f63a32ebb27b52d901b83e9243b26a35263f3dd80f90d27041af85a3aa5ec8c536df43
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxLC4C8WfszNpiRVxK65DzLlQCc+:2lFyfLPHiRE5bxLzC8WfeIRVlFvlQCc+
- TLSH T1EBC6230AB7929965C8302B7C20286317823E1D434F65AEEF5E927B5D4E78AF0C5B3573
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_c546bac06f10a99aac2ee18922ed5a4d_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_c546bac06f10a99aac2ee18922ed5a4d_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 11.0MB
- SHA256 bd001becd863bb52da3cb54bfe1772f63ef724daa0ffc9e5b70147a28760faf9
- MD5 c546bac06f10a99aac2ee18922ed5a4d
- SHA1 3a4abae534f6ee1f3dc0353c963e9783d04ab941
- SHA512 01bede73b961c79efa68f336fb891ce78e551692252b5fe4f9b72dae32f63a32ebb27b52d901b83e9243b26a35263f3dd80f90d27041af85a3aa5ec8c536df43
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxLC4C8WfszNpiRVxK65DzLlQCc+:2lFyfLPHiRE5bxLzC8WfeIRVlFvlQCc+
- TLSH T1EBC6230AB7929965C8302B7C20286317823E1D434F65AEEF5E927B5D4E78AF0C5B3573
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.