General
- Target 2026-09-10_70023c071ccdb9074ffd7f0b50698c95_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- Sample260910-sycdnatyax
- SHA256 47602b9b1f6392cfea8b134809327dfa6ecd8578d23de7de42dd94414309c25d
- MD5 70023c071ccdb9074ffd7f0b50698c95
- SHA1 4e95fd3a70b43e5ba211b0a095172dd8e8c3d519
- SHA512 0f17cbe0e0af6486597134f4930d82438698a7d4a642eb9ceb8972c753c3b2d07ba5e64e1822eee49d5702bfcb6a222eb9355f3800e58fa1a584ed8798203161
- SSDEEP 393216:JK6HiRE5bxa3KExL3JzATzC8WfeIRVlFvlQCce:AUbx4KOxk6lFv
- TLSH T1C3E62322B79258A2D874AF7C04196303413F2E87CE98AFEF3AD6376D49715F08976853
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_70023c071ccdb9074ffd7f0b50698c95_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_70023c071ccdb9074ffd7f0b50698c95_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- SHA256 47602b9b1f6392cfea8b134809327dfa6ecd8578d23de7de42dd94414309c25d
- MD5 70023c071ccdb9074ffd7f0b50698c95
- SHA1 4e95fd3a70b43e5ba211b0a095172dd8e8c3d519
- SHA512 0f17cbe0e0af6486597134f4930d82438698a7d4a642eb9ceb8972c753c3b2d07ba5e64e1822eee49d5702bfcb6a222eb9355f3800e58fa1a584ed8798203161
- SSDEEP 393216:JK6HiRE5bxa3KExL3JzATzC8WfeIRVlFvlQCce:AUbx4KOxk6lFv
- TLSH T1C3E62322B79258A2D874AF7C04196303413F2E87CE98AFEF3AD6376D49715F08976853
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.