General
- Target 2026-09-12_353bd018258f9c6d6d39590b47037055_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- Sample260913-eacsmabr8x
- SHA256 d775de1b515de14a38d4a018e47c6ae58b4f40a7746d627f5341ad3f524e5957
- MD5 353bd018258f9c6d6d39590b47037055
- SHA1 887d50200b3a6048ead7965e82fe82a5c2932774
- SHA512 4294c0f23441ac200cb382b79025faa1566be96a503dca959857e5c3bf6b4779b0b2ddec1d62046c47cc640101fb261f1765b50050ca72dfe0635ed781ee89c0
- SSDEEP 393216:2lFyfLPHiRE5bxkDMTNSG/lVrl3KExL3JzATzC8WfeIRVlF2:AUbxkyhpKOxk6lF2
- TLSH T178F63305B792DC65C8301B7C20686313813E1E034F55AAEF6E967B5D4E78AF1CAB3636
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_353bd018258f9c6d6d39590b47037055_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_353bd018258f9c6d6d39590b47037055_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- SHA256 d775de1b515de14a38d4a018e47c6ae58b4f40a7746d627f5341ad3f524e5957
- MD5 353bd018258f9c6d6d39590b47037055
- SHA1 887d50200b3a6048ead7965e82fe82a5c2932774
- SHA512 4294c0f23441ac200cb382b79025faa1566be96a503dca959857e5c3bf6b4779b0b2ddec1d62046c47cc640101fb261f1765b50050ca72dfe0635ed781ee89c0
- SSDEEP 393216:2lFyfLPHiRE5bxkDMTNSG/lVrl3KExL3JzATzC8WfeIRVlF2:AUbxkyhpKOxk6lF2
- TLSH T178F63305B792DC65C8301B7C20686313813E1E034F55AAEF6E967B5D4E78AF1CAB3636
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.