General
- Target 2026-09-16_dbc8307b562f6444bf33824917332fcc_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- Sample260916-kh6cssss7p
- SHA256 dfe5918b9494f8b98b8c5895a3f416cc8c746c124ce727585e42b10f5d3bc4ce
- MD5 dbc8307b562f6444bf33824917332fcc
- SHA1 132d1aefbc1dbd122617dd4d410beeb7a702bc5b
- SHA512 e08bf0d917a1873e2d46e9c119fea51b96cb1e96fd4d7d969b628115872f4844f6e9eca1e19db6b9407e53992b3f668ecb821a0e5f437b764cec021f13e8d2f0
- SSDEEP 393216:2lFyfLPHiRE5bxd6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6Qb:AUbxdPvQ6yhpKOxk6lFiPvQI
- TLSH T1F7373305B792D8A5C8305B7C20286313813E1D434F65AAEF5F967B594E78AF1CAB3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_dbc8307b562f6444bf33824917332fcc_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_dbc8307b562f6444bf33824917332fcc_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- SHA256 dfe5918b9494f8b98b8c5895a3f416cc8c746c124ce727585e42b10f5d3bc4ce
- MD5 dbc8307b562f6444bf33824917332fcc
- SHA1 132d1aefbc1dbd122617dd4d410beeb7a702bc5b
- SHA512 e08bf0d917a1873e2d46e9c119fea51b96cb1e96fd4d7d969b628115872f4844f6e9eca1e19db6b9407e53992b3f668ecb821a0e5f437b764cec021f13e8d2f0
- SSDEEP 393216:2lFyfLPHiRE5bxd6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6Qb:AUbxdPvQ6yhpKOxk6lFiPvQI
- TLSH T1F7373305B792D8A5C8305B7C20286313813E1D434F65AAEF5F967B594E78AF1CAB3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.