General
- Target 2026-09-12_e10d1c808c561a9d5beddf8cd0bd58ab_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- Sample260913-zbfk5adn8t
- SHA256 0c03ba5f6cef1d69054bcff1e195413eb2bfd49b3bcb4239f9a8b161e024ed0c
- MD5 e10d1c808c561a9d5beddf8cd0bd58ab
- SHA1 59c867f87dd812dfc02fc98622b15a503a2b821c
- SHA512 b45b2b71b06be5510441b54f5a16620cb30f875a59b722d4d1c5d869faebc7b0d5c0ab12ce9b15c26173f2480a5acf9d3a70cc3a1db5adac33491b071d592175
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxSsJcQvQaT0u5SHvOYDMVByQyVG/uzGN8:2lFyfLPHiRE5bxc6QaAu5SVDMTNSG/l8
- TLSH T103B62305B79298B5C8301B7C2068A313813E1E434F656AEF5F967B5D4E78AF1C6B3632
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_e10d1c808c561a9d5beddf8cd0bd58ab_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_e10d1c808c561a9d5beddf8cd0bd58ab_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- SHA256 0c03ba5f6cef1d69054bcff1e195413eb2bfd49b3bcb4239f9a8b161e024ed0c
- MD5 e10d1c808c561a9d5beddf8cd0bd58ab
- SHA1 59c867f87dd812dfc02fc98622b15a503a2b821c
- SHA512 b45b2b71b06be5510441b54f5a16620cb30f875a59b722d4d1c5d869faebc7b0d5c0ab12ce9b15c26173f2480a5acf9d3a70cc3a1db5adac33491b071d592175
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxSsJcQvQaT0u5SHvOYDMVByQyVG/uzGN8:2lFyfLPHiRE5bxc6QaAu5SVDMTNSG/l8
- TLSH T103B62305B79298B5C8301B7C2068A313813E1E434F656AEF5F967B5D4E78AF1C6B3632
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.