General
- Target 2026-09-21_227a006532aae7127d323b1b40e60b25_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- Sample260922-rxn6dsxalg
- SHA256 48efa0bfbfc058da6ab2fc7819b2c75cae7de094a02c2460e665280bb2486f9e
- MD5 227a006532aae7127d323b1b40e60b25
- SHA1 60e3c9462751f84e99ac5bd2be4ec116463b92a5
- SHA512 fdc01cd3cc339a72522921591b4174c7366263bdaf154d264c368c1f0954cfc1806e75df1f8f4d922ffe59d57e15b8b6f1a8ff584d37d1a3c3883e5b6db8b33e
- SSDEEP 393216:2lFyfLPHiRE5bxnCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVL:AUbxJPvQ6yhpKOxk6L
- TLSH T172173309B7929C65C8305B7C20686313813E1E034F55AAEB5F967B5D4E78AF1CAB3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-21_227a006532aae7127d323b1b40e60b25_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-21_227a006532aae7127d323b1b40e60b25_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- SHA256 48efa0bfbfc058da6ab2fc7819b2c75cae7de094a02c2460e665280bb2486f9e
- MD5 227a006532aae7127d323b1b40e60b25
- SHA1 60e3c9462751f84e99ac5bd2be4ec116463b92a5
- SHA512 fdc01cd3cc339a72522921591b4174c7366263bdaf154d264c368c1f0954cfc1806e75df1f8f4d922ffe59d57e15b8b6f1a8ff584d37d1a3c3883e5b6db8b33e
- SSDEEP 393216:2lFyfLPHiRE5bxnCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVL:AUbxJPvQ6yhpKOxk6L
- TLSH T172173309B7929C65C8305B7C20686313813E1E034F55AAEB5F967B5D4E78AF1CAB3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.