General
- Target 2026-09-11_3096892589811adb02f58c697b2598d3_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- Sample260912-nw32daba59
- SHA256 5d32a3ac7dbbd9b15a18384accadc12456185b8061fe47ced0670662d6affa40
- MD5 3096892589811adb02f58c697b2598d3
- SHA1 9ad228af930f3da0b76d9aa65e1b022acc73ab52
- SHA512 accc10a12c62a4c6945c1df1fac8b943d47dafc67a1605a949fbe7b99d2fd517c5335668027058372321b86d7ac712824715aa5c44b45d0d652b7aa9b631e0eb
- SSDEEP 393216:2lFyfLPHiRE5bxpVrl3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMi:AUbxTpKOxk6lFiPvQ65
- TLSH T114173306B7929C65C8305B7C20286313813E1D434F69AAEF5F967B594E78AF1C9B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-11_3096892589811adb02f58c697b2598d3_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-11_3096892589811adb02f58c697b2598d3_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- SHA256 5d32a3ac7dbbd9b15a18384accadc12456185b8061fe47ced0670662d6affa40
- MD5 3096892589811adb02f58c697b2598d3
- SHA1 9ad228af930f3da0b76d9aa65e1b022acc73ab52
- SHA512 accc10a12c62a4c6945c1df1fac8b943d47dafc67a1605a949fbe7b99d2fd517c5335668027058372321b86d7ac712824715aa5c44b45d0d652b7aa9b631e0eb
- SSDEEP 393216:2lFyfLPHiRE5bxpVrl3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMi:AUbxTpKOxk6lFiPvQ65
- TLSH T114173306B7929C65C8305B7C20286313813E1D434F69AAEF5F967B594E78AF1C9B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.