General
- Target 2026-09-12_6174eea8e686f962246731335800c25c_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- Sample260913-a6lces1vdv
- SHA256 24da275d2446f969723df0466247f3add8b155e3e5ec1e85e5d5736565e7605c
- MD5 6174eea8e686f962246731335800c25c
- SHA1 422000bbe1813f48b1ae65f5e8d68b5e9ec4c831
- SHA512 ac766799c1c7626037d85248bfa7997a09842d95ee923d49bc64ee0b97c6ff0836fec29162fe7faee01019be10a7757ed2ac669727e49eb143983c7b368c5475
- SSDEEP 393216:2lFyfLPHiRE5bxsQCcv6QaAu5SVDMTNSG/lVrl3KEP:AUbx5PvQ6yhpKw
- TLSH T14CD62305B79298B5C8305B7C2024A313813E1E434F65AAEF5F967B5D4E78AF1C6B3632
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_6174eea8e686f962246731335800c25c_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_6174eea8e686f962246731335800c25c_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- SHA256 24da275d2446f969723df0466247f3add8b155e3e5ec1e85e5d5736565e7605c
- MD5 6174eea8e686f962246731335800c25c
- SHA1 422000bbe1813f48b1ae65f5e8d68b5e9ec4c831
- SHA512 ac766799c1c7626037d85248bfa7997a09842d95ee923d49bc64ee0b97c6ff0836fec29162fe7faee01019be10a7757ed2ac669727e49eb143983c7b368c5475
- SSDEEP 393216:2lFyfLPHiRE5bxsQCcv6QaAu5SVDMTNSG/lVrl3KEP:AUbx5PvQ6yhpKw
- TLSH T14CD62305B79298B5C8305B7C2024A313813E1E434F65AAEF5F967B5D4E78AF1C6B3632
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.