General
- Target 2026-09-19_b8dffacfecfc667bb1f1c7f4e08cab41_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 11.0MB
- Sample260919-jm526ayanf
- SHA256 4dd3ade9c1b01b774e7af8bf6160c74739e0d066a6eb74342b8cc9d5dcf57c8b
- MD5 b8dffacfecfc667bb1f1c7f4e08cab41
- SHA1 17c1b83aebcf9391c9a6cebd98aeb26a200913dc
- SHA512 707c0e6fde01f3257399c761731ab92e4be21322bcfc9e3fac17d4157d71d7d06750005348ad4feaaa25e1048327def2619b4a8ac0118d0734d2acb1537bcfb0
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxEsJcQvQaT0u5SHvOYDMVByQyVG/uzGNVyAJ:2lFyfLPHiRE5bxm6QaAu5SVDMTNSG/ln
- TLSH T133C62305B792D8B5C8301B7C2024A313813E1E435F65AAEF5F967B594E78AF1C6B3632
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-19_b8dffacfecfc667bb1f1c7f4e08cab41_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-19_b8dffacfecfc667bb1f1c7f4e08cab41_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 11.0MB
- SHA256 4dd3ade9c1b01b774e7af8bf6160c74739e0d066a6eb74342b8cc9d5dcf57c8b
- MD5 b8dffacfecfc667bb1f1c7f4e08cab41
- SHA1 17c1b83aebcf9391c9a6cebd98aeb26a200913dc
- SHA512 707c0e6fde01f3257399c761731ab92e4be21322bcfc9e3fac17d4157d71d7d06750005348ad4feaaa25e1048327def2619b4a8ac0118d0734d2acb1537bcfb0
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxEsJcQvQaT0u5SHvOYDMVByQyVG/uzGNVyAJ:2lFyfLPHiRE5bxm6QaAu5SVDMTNSG/ln
- TLSH T133C62305B792D8B5C8301B7C2024A313813E1E435F65AAEF5F967B594E78AF1C6B3632
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.