General
- Target 2026-09-16_7d0e2c48c057a679abc819b9059f42b4_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- Sample260916-yttp2afk5y
- SHA256 efbdc4c589e608978054a4b914df2d207af95bd485655dc15bed6d3c803175a2
- MD5 7d0e2c48c057a679abc819b9059f42b4
- SHA1 4fdc813796f90e574c3774808f39c60f0bec46d9
- SHA512 5555b4c3ecac28ec04c8c96887af6d603e56038e2b9dc70349a488da6ae945c886a6bba2d00019c8d057f35ce442db5d1f1e549b8dfa48df50a286c9d73da84d
- SSDEEP 393216:JK6HiRE5bxgxL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVK:AUbxSxk6lFiPvQ6ys
- TLSH T17A173322B79158A6DCB49F3C04196303403F2E47DE98AFEF3BDA37694A715F08976942
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_7d0e2c48c057a679abc819b9059f42b4_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_7d0e2c48c057a679abc819b9059f42b4_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- SHA256 efbdc4c589e608978054a4b914df2d207af95bd485655dc15bed6d3c803175a2
- MD5 7d0e2c48c057a679abc819b9059f42b4
- SHA1 4fdc813796f90e574c3774808f39c60f0bec46d9
- SHA512 5555b4c3ecac28ec04c8c96887af6d603e56038e2b9dc70349a488da6ae945c886a6bba2d00019c8d057f35ce442db5d1f1e549b8dfa48df50a286c9d73da84d
- SSDEEP 393216:JK6HiRE5bxgxL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVK:AUbxSxk6lFiPvQ6ys
- TLSH T17A173322B79158A6DCB49F3C04196303403F2E47DE98AFEF3BDA37694A715F08976942
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.