General
- Target 2026-09-12_6cdecd1d5488eacfd99dc16cefb3b548_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- Sample260912-3xp88sca43
- SHA256 2a9420328930f52d9033ac4d4c00ef1afb87aecab10e2517f7fb75850b10d6bc
- MD5 6cdecd1d5488eacfd99dc16cefb3b548
- SHA1 e6b1d62a484c77f55c1e6f7711d532bbe519513a
- SHA512 abefc6657f184b29beb37c4694d169e2ac923982d76fe809f82ce7089f8c5b2fc93480f2319e02f15b92116b00216adb0bc9613b58d90816bbc7af2f00691bce
- SSDEEP 393216:2lFyfLPHiRE5bxklQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVs:AUbxLPvQ6yhpKOxk6s
- TLSH T1C0173309B7929DA5C8305B7C20286313813E1E034F55AAEF5F967B594E78AF1C9B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_6cdecd1d5488eacfd99dc16cefb3b548_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_6cdecd1d5488eacfd99dc16cefb3b548_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- SHA256 2a9420328930f52d9033ac4d4c00ef1afb87aecab10e2517f7fb75850b10d6bc
- MD5 6cdecd1d5488eacfd99dc16cefb3b548
- SHA1 e6b1d62a484c77f55c1e6f7711d532bbe519513a
- SHA512 abefc6657f184b29beb37c4694d169e2ac923982d76fe809f82ce7089f8c5b2fc93480f2319e02f15b92116b00216adb0bc9613b58d90816bbc7af2f00691bce
- SSDEEP 393216:2lFyfLPHiRE5bxklQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVs:AUbxLPvQ6yhpKOxk6s
- TLSH T1C0173309B7929DA5C8305B7C20286313813E1E034F55AAEF5F967B594E78AF1C9B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.