General
- Target 2026-09-12_e5a100256af139687a811304a985c8e2_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- Sample260912-s8dz8sbm7y
- SHA256 b4e4a51f4cdfbc10c20edcccdb41cebb0d85915e13dacfd0609888ba36e47fc3
- MD5 e5a100256af139687a811304a985c8e2
- SHA1 15bd17fe73bf9f2602ca09bedc774fb988c0d113
- SHA512 0f2afa3e4dfbe27d395dc866191cd11cbaea1cef65d36398a816c47e78016fb3afa444e1b6ca7ec8a2608fe6c0d526b42f8a9eeba9e41240fa4bbf5e5be2ba4e
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxIzLlQCcHsJcQvQaT0u5SHvP:2lFyfLPHiRE5bxIvlQCcv6QaAu5SX
- TLSH T12FB6230AB79299B4C8305B7C2024A313813E1D435F65AEEB5E967B1D4E78AF1C5B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_e5a100256af139687a811304a985c8e2_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_e5a100256af139687a811304a985c8e2_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- SHA256 b4e4a51f4cdfbc10c20edcccdb41cebb0d85915e13dacfd0609888ba36e47fc3
- MD5 e5a100256af139687a811304a985c8e2
- SHA1 15bd17fe73bf9f2602ca09bedc774fb988c0d113
- SHA512 0f2afa3e4dfbe27d395dc866191cd11cbaea1cef65d36398a816c47e78016fb3afa444e1b6ca7ec8a2608fe6c0d526b42f8a9eeba9e41240fa4bbf5e5be2ba4e
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxIzLlQCcHsJcQvQaT0u5SHvP:2lFyfLPHiRE5bxIvlQCcv6QaAu5SX
- TLSH T12FB6230AB79299B4C8305B7C2024A313813E1D435F65AEEB5E967B1D4E78AF1C5B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.