General
- Target 2026-09-19_fc3545bbe6e5c0b31e6b89479254d225_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- Sample260919-wsf2fazz2j
- SHA256 9d24f2bca72b3c6584cce33c44786e177e901c3253cc9cfd8c69457cba53a07e
- MD5 fc3545bbe6e5c0b31e6b89479254d225
- SHA1 2f6714d30a2f74ad2af13965581ab699dd927ee3
- SHA512 c9dd3d2cc7d241f2cd4158c555c38d182871a31dd007a88f6f5efcfe14fb80c49abb70c79289abbe1d8ca242e64f6696c849454ace9e1be3cb894b681c6e94a3
- SSDEEP 393216:JK6HiRE5bxIQaAu5SVDMTNSG/lVrl3KExL3JzATzC8Wfe2:AUbxxvQ6yhpKOxkS
- TLSH T146F62312B79158A6DC749F7C0419A303403F2E47CE98ABEF3FDA37694A715F189B6902
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-19_fc3545bbe6e5c0b31e6b89479254d225_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-19_fc3545bbe6e5c0b31e6b89479254d225_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- SHA256 9d24f2bca72b3c6584cce33c44786e177e901c3253cc9cfd8c69457cba53a07e
- MD5 fc3545bbe6e5c0b31e6b89479254d225
- SHA1 2f6714d30a2f74ad2af13965581ab699dd927ee3
- SHA512 c9dd3d2cc7d241f2cd4158c555c38d182871a31dd007a88f6f5efcfe14fb80c49abb70c79289abbe1d8ca242e64f6696c849454ace9e1be3cb894b681c6e94a3
- SSDEEP 393216:JK6HiRE5bxIQaAu5SVDMTNSG/lVrl3KExL3JzATzC8Wfe2:AUbxxvQ6yhpKOxkS
- TLSH T146F62312B79158A6DC749F7C0419A303403F2E47CE98ABEF3FDA37694A715F189B6902
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.