General
- Target 2026-09-11_462e97fd863ca15f410698eecd3e4dd6_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- Sample260912-mvdjnaxtfx
- SHA256 7d4f58df12caf5dcc5fd23ca352a7beedffd48ad7e1dbf2670479cbc7a2cf6c2
- MD5 462e97fd863ca15f410698eecd3e4dd6
- SHA1 eb7d23df7a8ca769c0bcdf1f9ae2098f3867533f
- SHA512 eead9e61f448fe6e92d2d1ec183b2f0adc1aa4f57f20971c01b4ea9fd2b7a1e9ab363675b4e9ba9330c982790bb6aa4b3c75331f9b432efa5f004e2b46df642a
- SSDEEP 393216:2lFyfLPHiRE5bxe3KExL3JzATzC8WfeIRVlFvlQCcB:AUbxMKOxk6lFc
- TLSH T1BFD6230AB7929C65C8302B7C20286313813E1D434F65AAEF5E927B5D4E78AF1C9B3577
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-11_462e97fd863ca15f410698eecd3e4dd6_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-11_462e97fd863ca15f410698eecd3e4dd6_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- SHA256 7d4f58df12caf5dcc5fd23ca352a7beedffd48ad7e1dbf2670479cbc7a2cf6c2
- MD5 462e97fd863ca15f410698eecd3e4dd6
- SHA1 eb7d23df7a8ca769c0bcdf1f9ae2098f3867533f
- SHA512 eead9e61f448fe6e92d2d1ec183b2f0adc1aa4f57f20971c01b4ea9fd2b7a1e9ab363675b4e9ba9330c982790bb6aa4b3c75331f9b432efa5f004e2b46df642a
- SSDEEP 393216:2lFyfLPHiRE5bxe3KExL3JzATzC8WfeIRVlFvlQCcB:AUbxMKOxk6lFc
- TLSH T1BFD6230AB7929C65C8302B7C20286313813E1D434F65AAEF5E927B5D4E78AF1C9B3577
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.