General
- Target 2026-09-22_31ceab5581692e5cf868848d89b6cc7b_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 22.0MB
- Sample260922-jsrrqabc99
- SHA256 36a27970bb261178ddc08ee33a4fa8253c539631cd03087620861d43c48d9ea6
- MD5 31ceab5581692e5cf868848d89b6cc7b
- SHA1 f94e78a1437744acd6d65cb7145beef51caac31b
- SHA512 8953b9c877084bf18822bd94831bcb61cabf51c20cff332a839a9172a9b36deb502ffa802c2734560f518a856bcfa91bc5085632be4bca1f9bf751331a41b568
- SSDEEP 393216:2lFyfLPHiRE5bxkQaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6QaL:AUbxtvQ6yhpKOxk6lFiPvQN
- TLSH T1D8373305B7929CA5C8305B7C20286313813E1D434F65AAEF5E967B5D4E78AF1CAB3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-22_31ceab5581692e5cf868848d89b6cc7b_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-22_31ceab5581692e5cf868848d89b6cc7b_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 22.0MB
- SHA256 36a27970bb261178ddc08ee33a4fa8253c539631cd03087620861d43c48d9ea6
- MD5 31ceab5581692e5cf868848d89b6cc7b
- SHA1 f94e78a1437744acd6d65cb7145beef51caac31b
- SHA512 8953b9c877084bf18822bd94831bcb61cabf51c20cff332a839a9172a9b36deb502ffa802c2734560f518a856bcfa91bc5085632be4bca1f9bf751331a41b568
- SSDEEP 393216:2lFyfLPHiRE5bxkQaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6QaL:AUbxtvQ6yhpKOxk6lFiPvQN
- TLSH T1D8373305B7929CA5C8305B7C20286313813E1D434F65AAEF5E967B5D4E78AF1CAB3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.