General
- Target 2026-09-21_9ccaad15fcd497b7df9423235b38cc1c_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- Sample260922-ndmaxavaqh
- SHA256 f2aa53284a98de60bab7c085218c38f01d41a0d98e25e94cff7aaa5e34006a43
- MD5 9ccaad15fcd497b7df9423235b38cc1c
- SHA1 ab5ae557b5f0549fe315502b7fab79cf73526aed
- SHA512 265a935ded29ce450c48fd38fcec94350c15e49f2b6cec4e4f9ab5b643a43f6d90aaf142254737afc15b84fc578e8d16d779b24e0b449d9821e6adff87f4e6dd
- SSDEEP 196608:JZ872k1AeAi2KOld5bxR/CGnbP3JzATC4C8WfszNpiRVxKv:JK6HiRE5bxZxL3JzATzC8WfeIRVg
- TLSH T1FBB62322B79258A2DC74AF7C04196303413E2E47CE98AFEF3AD63B6D49715F08977852
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-21_9ccaad15fcd497b7df9423235b38cc1c_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-21_9ccaad15fcd497b7df9423235b38cc1c_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- SHA256 f2aa53284a98de60bab7c085218c38f01d41a0d98e25e94cff7aaa5e34006a43
- MD5 9ccaad15fcd497b7df9423235b38cc1c
- SHA1 ab5ae557b5f0549fe315502b7fab79cf73526aed
- SHA512 265a935ded29ce450c48fd38fcec94350c15e49f2b6cec4e4f9ab5b643a43f6d90aaf142254737afc15b84fc578e8d16d779b24e0b449d9821e6adff87f4e6dd
- SSDEEP 196608:JZ872k1AeAi2KOld5bxR/CGnbP3JzATC4C8WfszNpiRVxKv:JK6HiRE5bxZxL3JzATzC8WfeIRVg
- TLSH T1FBB62322B79258A2DC74AF7C04196303413E2E47CE98AFEF3AD63B6D49715F08977852
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.