General
- Target 2026-09-19_9bd00cbf93d7e8f6a0315a358a180d3d_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- Sample260919-2mkqbscc87
- SHA256 04929a3058d1a43e4878d35dd4f719a54e9062dd3b946470faa6c5f9ccff8b2f
- MD5 9bd00cbf93d7e8f6a0315a358a180d3d
- SHA1 da965377e2da2542b642e6d596f0c4532b9d431e
- SHA512 90c065d51b0912f0335096709a7d168e464f98e3848e4443294ea82432ec7587ceceaa7394598eb2b42bb41972e0df8dd8efa48c06ff9ec66bded1c7aba48325
- SSDEEP 393216:JK6HiRE5bx+G/lVrl3KExL3JzATzC8WfeIRVlFvlQCcc:AUbxlpKOxk6lF1
- TLSH T150F62322B79258A2D874AF7C04196303403F2E47DE98ABEF3BD6376D4A715F08977852
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-19_9bd00cbf93d7e8f6a0315a358a180d3d_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-19_9bd00cbf93d7e8f6a0315a358a180d3d_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- SHA256 04929a3058d1a43e4878d35dd4f719a54e9062dd3b946470faa6c5f9ccff8b2f
- MD5 9bd00cbf93d7e8f6a0315a358a180d3d
- SHA1 da965377e2da2542b642e6d596f0c4532b9d431e
- SHA512 90c065d51b0912f0335096709a7d168e464f98e3848e4443294ea82432ec7587ceceaa7394598eb2b42bb41972e0df8dd8efa48c06ff9ec66bded1c7aba48325
- SSDEEP 393216:JK6HiRE5bx+G/lVrl3KExL3JzATzC8WfeIRVlFvlQCcc:AUbxlpKOxk6lF1
- TLSH T150F62322B79258A2D874AF7C04196303403F2E47DE98ABEF3BD6376D4A715F08977852
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.