General
- Target 2026-09-21_a8970ad795320f1c3d6ed99a6f4c0dd2_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- Sample260922-m2a24scf38
- SHA256 9c53dd5783c24d0b0dbc77a2d3d8de8aefc2e543323db297e1cdc62fdd619124
- MD5 a8970ad795320f1c3d6ed99a6f4c0dd2
- SHA1 7accf02c22ca9b9b8bb55ea4f979dbd6d7d8b140
- SHA512 831cdda586eab178b73a4c7208e5edf979a1296622ebcea61cefb84196985365433ec1b4bae1fc08ed8a74266c8cad87b47978d386e35dec2f996ce3a9509d4e
- SSDEEP 393216:JK6HiRE5bxDSG/lVrl3KExL3JzATzC8WfeIRVlFvv:AUbxDhpKOxk6lF3
- TLSH T11DE62322B79258A2DC749F7C04196303413F2E47DE98ABEF3BD63B6D49715F089B6842
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-21_a8970ad795320f1c3d6ed99a6f4c0dd2_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-21_a8970ad795320f1c3d6ed99a6f4c0dd2_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- SHA256 9c53dd5783c24d0b0dbc77a2d3d8de8aefc2e543323db297e1cdc62fdd619124
- MD5 a8970ad795320f1c3d6ed99a6f4c0dd2
- SHA1 7accf02c22ca9b9b8bb55ea4f979dbd6d7d8b140
- SHA512 831cdda586eab178b73a4c7208e5edf979a1296622ebcea61cefb84196985365433ec1b4bae1fc08ed8a74266c8cad87b47978d386e35dec2f996ce3a9509d4e
- SSDEEP 393216:JK6HiRE5bxDSG/lVrl3KExL3JzATzC8WfeIRVlFvv:AUbxDhpKOxk6lF3
- TLSH T11DE62322B79258A2DC749F7C04196303413F2E47DE98ABEF3BD63B6D49715F089B6842
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.