General
- Target 2026-09-10_2d90ebcece53a852f8e2397092e2fd06_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- Sample260910-w7pxwsthnb
- SHA256 da9c3a0331e9d296f827073645743015d18d2c6eba1d1dc5742d04209b2dee4a
- MD5 2d90ebcece53a852f8e2397092e2fd06
- SHA1 76dd839d70eebd0d3e162d052ed6bc9145371027
- SHA512 a88a4dcd4c18e10e1fff5bdd5c923d7e2fcbd09712a64c8abe7943d2044de4206ca66ba0c0f6827847afc922ada270ba3cb6c27ffad9f9783c1965f0b7cf425b
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxMDzLlQCcHsJcQvQaT0u5SHvl:2lFyfLPHiRE5bxqvlQCcv6QaAu5St
- TLSH T10DB6230AB79299B4C8301B7C2024A313813E1D435F65AEEF5E967B1D4A78AF1C5B3637
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_2d90ebcece53a852f8e2397092e2fd06_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_2d90ebcece53a852f8e2397092e2fd06_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- SHA256 da9c3a0331e9d296f827073645743015d18d2c6eba1d1dc5742d04209b2dee4a
- MD5 2d90ebcece53a852f8e2397092e2fd06
- SHA1 76dd839d70eebd0d3e162d052ed6bc9145371027
- SHA512 a88a4dcd4c18e10e1fff5bdd5c923d7e2fcbd09712a64c8abe7943d2044de4206ca66ba0c0f6827847afc922ada270ba3cb6c27ffad9f9783c1965f0b7cf425b
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxMDzLlQCcHsJcQvQaT0u5SHvl:2lFyfLPHiRE5bxqvlQCcv6QaAu5St
- TLSH T10DB6230AB79299B4C8301B7C2024A313813E1D435F65AEEF5E967B1D4A78AF1C5B3637
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.