General
- Target 2026-09-12_53ffdef3a9a20cff2c9685c857f2602f_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- Sample260913-b57ppszbqb
- SHA256 b1313262be2da2b3513cc4b9f33084a37d085bd46c7b22d6918d8c04dacb6043
- MD5 53ffdef3a9a20cff2c9685c857f2602f
- SHA1 67ae53ba1afe93839b7c75db52a3448b6e8a1874
- SHA512 e74d39014f57297369ef141ba17395b477fc36664bcd3b635de9f8aca3b6e09a08f058f85d440591c2e2505527a1f1e630801e21b3e0fb53a6f35269ebab9175
- SSDEEP 393216:2lFyfLPHiRE5bxheIRVlFvlQCcv6QaAu5Se:AUbxDlFiPvQd
- TLSH T189D6230AF79298B5C8306B7C10246317823E1E434F65AEEF5E967B5D4A78AF0C5B3532
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_53ffdef3a9a20cff2c9685c857f2602f_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_53ffdef3a9a20cff2c9685c857f2602f_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- SHA256 b1313262be2da2b3513cc4b9f33084a37d085bd46c7b22d6918d8c04dacb6043
- MD5 53ffdef3a9a20cff2c9685c857f2602f
- SHA1 67ae53ba1afe93839b7c75db52a3448b6e8a1874
- SHA512 e74d39014f57297369ef141ba17395b477fc36664bcd3b635de9f8aca3b6e09a08f058f85d440591c2e2505527a1f1e630801e21b3e0fb53a6f35269ebab9175
- SSDEEP 393216:2lFyfLPHiRE5bxheIRVlFvlQCcv6QaAu5Se:AUbxDlFiPvQd
- TLSH T189D6230AF79298B5C8306B7C10246317823E1E434F65AEEF5E967B5D4A78AF0C5B3532
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.