General
- Target 2026-09-12_b4e125a9e0d83af34dc57790e3327a9e_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- Sample260912-xwdwxsshle
- SHA256 3b0f29295f96d853c0c5797ff2415b9934a888c7c3def318e84fb71e34276af1
- MD5 b4e125a9e0d83af34dc57790e3327a9e
- SHA1 9f43e8b7442f1477bc5d1396c770effcc4d0c53f
- SHA512 10f4b8575b2087da844b6fa4eeb603fe392b2a088820715aae2c207e9ea8ed5e5d4ddc924fa72c67b96f85f83bcffdb955c7f49f65c11aef569d66c247e125e5
- SSDEEP 393216:JK6HiRE5bxWDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5Sp:AUbxWyhpKOxk6lFiPvQA
- TLSH T1B0173322B79258A6DC749F7C041D6303403F2E47CE98ABEF3BD637694A725F08976852
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_b4e125a9e0d83af34dc57790e3327a9e_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_b4e125a9e0d83af34dc57790e3327a9e_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- SHA256 3b0f29295f96d853c0c5797ff2415b9934a888c7c3def318e84fb71e34276af1
- MD5 b4e125a9e0d83af34dc57790e3327a9e
- SHA1 9f43e8b7442f1477bc5d1396c770effcc4d0c53f
- SHA512 10f4b8575b2087da844b6fa4eeb603fe392b2a088820715aae2c207e9ea8ed5e5d4ddc924fa72c67b96f85f83bcffdb955c7f49f65c11aef569d66c247e125e5
- SSDEEP 393216:JK6HiRE5bxWDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5Sp:AUbxWyhpKOxk6lFiPvQA
- TLSH T1B0173322B79258A6DC749F7C041D6303403F2E47CE98ABEF3BD637694A725F08976852
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.