General
- Target 2026-09-12_078566350d967a16a5144b8204aaa587_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- Sample260913-hv57fstbla
- SHA256 8642878613e968f3c75695d319a1e723bd2fa380017554aef69de6856443ede3
- MD5 078566350d967a16a5144b8204aaa587
- SHA1 e0a66cefb8094434b107a432b6b95547c7672ba1
- SHA512 3a13c113b09aa13fa31959273062f5c8faba8412c160fa2d76b46044c4769810c1d5eb56275c37ec534cfdd139823644f1e7dda27a84b5e02a58a8f61fd59c4d
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bx3szNpiRVxK65DzLlQCcq:2lFyfLPHiRE5bx3eIRVlFvlQCcq
- TLSH T107B6230AB79298B5C8312B7C20246317813E1E434F65AEEF5E927B5D4A78AF0C5B3573
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_078566350d967a16a5144b8204aaa587_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_078566350d967a16a5144b8204aaa587_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- SHA256 8642878613e968f3c75695d319a1e723bd2fa380017554aef69de6856443ede3
- MD5 078566350d967a16a5144b8204aaa587
- SHA1 e0a66cefb8094434b107a432b6b95547c7672ba1
- SHA512 3a13c113b09aa13fa31959273062f5c8faba8412c160fa2d76b46044c4769810c1d5eb56275c37ec534cfdd139823644f1e7dda27a84b5e02a58a8f61fd59c4d
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bx3szNpiRVxK65DzLlQCcq:2lFyfLPHiRE5bx3eIRVlFvlQCcq
- TLSH T107B6230AB79298B5C8312B7C20246317813E1E434F65AEEF5E927B5D4A78AF0C5B3573
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.