General
- Target 2026-09-20_e5366dd349f7d0c7fb7f202b6b3bc6f4_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- Sample260920-3cacaavves
- SHA256 964827877395496328658d02cf25263e2f20eb5bb35756b35e0c548cf549e4a4
- MD5 e5366dd349f7d0c7fb7f202b6b3bc6f4
- SHA1 c813f56194edbca758263e336f39278942b4c3a8
- SHA512 36cf4eb528e3e8e5374d9431a5b3b1f2c7410bb4ae6b546e16f3b782bfdd81478bd9dedd9944efd3ac136d154402294abf8e5677ab0e6e7604947c36721698b3
- SSDEEP 393216:2lFyfLPHiRE5bxGu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVF:AUbxGQ6yhpKOxk6F
- TLSH T150F62305B792DD65C8301B7C20686313813E0E034F55AAEF6E967B5D4E78AF1CAB7632
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-20_e5366dd349f7d0c7fb7f202b6b3bc6f4_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-20_e5366dd349f7d0c7fb7f202b6b3bc6f4_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- SHA256 964827877395496328658d02cf25263e2f20eb5bb35756b35e0c548cf549e4a4
- MD5 e5366dd349f7d0c7fb7f202b6b3bc6f4
- SHA1 c813f56194edbca758263e336f39278942b4c3a8
- SHA512 36cf4eb528e3e8e5374d9431a5b3b1f2c7410bb4ae6b546e16f3b782bfdd81478bd9dedd9944efd3ac136d154402294abf8e5677ab0e6e7604947c36721698b3
- SSDEEP 393216:2lFyfLPHiRE5bxGu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVF:AUbxGQ6yhpKOxk6F
- TLSH T150F62305B792DD65C8301B7C20686313813E0E034F55AAEF6E967B5D4E78AF1CAB7632
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.