General
- Target 2026-09-19_a2c839caff2ac240829de13d4778de2f_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 12.0MB
- Sample260919-2b258sty8k
- SHA256 70a393ac9c75eeb7fafea43c67e2ba68bfb747477cbaa87bc673c4ccafe7422f
- MD5 a2c839caff2ac240829de13d4778de2f
- SHA1 715e127a8fffbf5c158a84e0a53e405168517b39
- SHA512 112c2db107af461661bf9cb0ad99d5a07af6e0f05efa3f2675b1eb545a6f8e7b2c92e32c4d3de6fd83aa5294fb348d93bd6f8b2235465aa40eb39aa9ace27573
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bx1DMVByQyVG/uzGNVyAl3K8fCGnbP3JzATC4C8WfszNT:2lFyfLPHiRE5bx1DMTNSG/lVrl3KExLu
- TLSH T149C62309B792DC65C8301B7C20686313813E1E034F55AAEF6E967B5D4E78AF1C9B3636
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-19_a2c839caff2ac240829de13d4778de2f_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-19_a2c839caff2ac240829de13d4778de2f_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 12.0MB
- SHA256 70a393ac9c75eeb7fafea43c67e2ba68bfb747477cbaa87bc673c4ccafe7422f
- MD5 a2c839caff2ac240829de13d4778de2f
- SHA1 715e127a8fffbf5c158a84e0a53e405168517b39
- SHA512 112c2db107af461661bf9cb0ad99d5a07af6e0f05efa3f2675b1eb545a6f8e7b2c92e32c4d3de6fd83aa5294fb348d93bd6f8b2235465aa40eb39aa9ace27573
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bx1DMVByQyVG/uzGNVyAl3K8fCGnbP3JzATC4C8WfszNT:2lFyfLPHiRE5bx1DMTNSG/lVrl3KExLu
- TLSH T149C62309B792DC65C8301B7C20686313813E1E034F55AAEF6E967B5D4E78AF1C9B3636
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.