General
- Target 2026-09-12_ab60badd7a7872ee2c47eeee3f1ae73a_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- Sample260912-ykcedstcrd
- SHA256 701efb5f932e710e7f57af30172f3f729cbfe53696b7f1be4c51fe21eac36b06
- MD5 ab60badd7a7872ee2c47eeee3f1ae73a
- SHA1 e50785b49452b5ab7cb42acc798d240ee60dd403
- SHA512 04ed0f570c9719ce87f8a6f758b7595a31b18b6479e5fae09d211632fb6d838109472f3f1d2a796ffdfcb918f0a3dfcd25e1713c17c2513103adf036b124f3c3
- SSDEEP 393216:2lFyfLPHiRE5bxdIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3H:AUbxclFiPvQ6yhpH
- TLSH T10DF63306B79298B4C8301B7C20646313813E1E435F65AAEF5F967B5D4A78AF1C6B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_ab60badd7a7872ee2c47eeee3f1ae73a_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_ab60badd7a7872ee2c47eeee3f1ae73a_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- SHA256 701efb5f932e710e7f57af30172f3f729cbfe53696b7f1be4c51fe21eac36b06
- MD5 ab60badd7a7872ee2c47eeee3f1ae73a
- SHA1 e50785b49452b5ab7cb42acc798d240ee60dd403
- SHA512 04ed0f570c9719ce87f8a6f758b7595a31b18b6479e5fae09d211632fb6d838109472f3f1d2a796ffdfcb918f0a3dfcd25e1713c17c2513103adf036b124f3c3
- SSDEEP 393216:2lFyfLPHiRE5bxdIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3H:AUbxclFiPvQ6yhpH
- TLSH T10DF63306B79298B4C8301B7C20646313813E1E435F65AAEF5F967B5D4A78AF1C6B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.