General
- Target 2026-09-10_a53b9cca75f91c705fda74f2537b13b0_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 21.0MB
- Sample260910-pprkfacj3s
- SHA256 b588462695fc58a6d608c5dd1cc9489be60129f325ae624f9ef10ad4e53a3970
- MD5 a53b9cca75f91c705fda74f2537b13b0
- SHA1 6ee3ca974a3f802d27efe28da77d027da55d0ceb
- SHA512 81ee83a90288d88764f206a1c59bf3736fd7febda08034aeb40e1e006f4dcda969de3b8557e164bb1fae1cb8cf590ece6e0f9c79bee61f1efc277f94e5f0c3c8
- SSDEEP 393216:2lFyfLPHiRE5bx8L3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3a:AUbxwxk6lFiPvQ6yhpKOxc
- TLSH T1E4273309B7A2D865C8305B7C20686313813E1E034F55AAEF5E967B5D4E78AF1C9B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_a53b9cca75f91c705fda74f2537b13b0_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_a53b9cca75f91c705fda74f2537b13b0_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 21.0MB
- SHA256 b588462695fc58a6d608c5dd1cc9489be60129f325ae624f9ef10ad4e53a3970
- MD5 a53b9cca75f91c705fda74f2537b13b0
- SHA1 6ee3ca974a3f802d27efe28da77d027da55d0ceb
- SHA512 81ee83a90288d88764f206a1c59bf3736fd7febda08034aeb40e1e006f4dcda969de3b8557e164bb1fae1cb8cf590ece6e0f9c79bee61f1efc277f94e5f0c3c8
- SSDEEP 393216:2lFyfLPHiRE5bx8L3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3a:AUbxwxk6lFiPvQ6yhpKOxc
- TLSH T1E4273309B7A2D865C8305B7C20686313813E1E034F55AAEF5E967B5D4E78AF1C9B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.