General
- Target 2026-09-12_44406a86039410344cac681d53fe07b6_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- Sample260913-c8gs5aeb32
- SHA256 e3b365f670b9845964e744dfc01494aa70c7cfb643d13d16f9926e4ea64c882e
- MD5 44406a86039410344cac681d53fe07b6
- SHA1 7b6371e050d33a92495a60538584b244fbb21092
- SHA512 b80f963568b988b83f9803288f8adbcea00a3d6f873171ea5b6a9755fc542eb36744705f252d64ddf7e03105b7ce7bd1b22cddf71d6f10973e89b82c1c043c83
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxrJzATC4C8WfszNpiRVxK65Dj:2lFyfLPHiRE5bxrJzATzC8WfeIRVlFj
- TLSH T1E2B62306B792D865C8302B7C20686313823E1D434F65ABEF5E967B5D4E78AF1C9B3532
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_44406a86039410344cac681d53fe07b6_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_44406a86039410344cac681d53fe07b6_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- SHA256 e3b365f670b9845964e744dfc01494aa70c7cfb643d13d16f9926e4ea64c882e
- MD5 44406a86039410344cac681d53fe07b6
- SHA1 7b6371e050d33a92495a60538584b244fbb21092
- SHA512 b80f963568b988b83f9803288f8adbcea00a3d6f873171ea5b6a9755fc542eb36744705f252d64ddf7e03105b7ce7bd1b22cddf71d6f10973e89b82c1c043c83
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxrJzATC4C8WfszNpiRVxK65Dj:2lFyfLPHiRE5bxrJzATzC8WfeIRVlFj
- TLSH T1E2B62306B792D865C8302B7C20686313823E1D434F65ABEF5E967B5D4E78AF1C9B3532
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.