General
- Target 2026-09-11_1754d0b577cec3579e15ae5f84cd3881_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- Sample260912-p24qjacb39
- SHA256 060adee21baf8946f16e904727af79ddb6b9f545b15437b1324b149a563c64d0
- MD5 1754d0b577cec3579e15ae5f84cd3881
- SHA1 6e8234297ac4c0e82c86a883ac7862b6354ff4cf
- SHA512 76e9749de402c82d3610c85c8a011096e0266d372f4f4b9af60546e0c9e9690b7a94a155d2b2ec7962229e9cca29ebefca6fab1836e9f7a3691721b2d8b3152f
- SSDEEP 393216:2lFyfLPHiRE5bxmeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIl:AUbxolFiPvQ6yhpKOxk6J
- TLSH T10137330AB7929CB5C8305B7C10286313813E1E434F55AAEB5F967B594E78AF1C9B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-11_1754d0b577cec3579e15ae5f84cd3881_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-11_1754d0b577cec3579e15ae5f84cd3881_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- SHA256 060adee21baf8946f16e904727af79ddb6b9f545b15437b1324b149a563c64d0
- MD5 1754d0b577cec3579e15ae5f84cd3881
- SHA1 6e8234297ac4c0e82c86a883ac7862b6354ff4cf
- SHA512 76e9749de402c82d3610c85c8a011096e0266d372f4f4b9af60546e0c9e9690b7a94a155d2b2ec7962229e9cca29ebefca6fab1836e9f7a3691721b2d8b3152f
- SSDEEP 393216:2lFyfLPHiRE5bxmeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIl:AUbxolFiPvQ6yhpKOxk6J
- TLSH T10137330AB7929CB5C8305B7C10286313813E1E434F55AAEB5F967B594E78AF1C9B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.