General
- Target 2026-09-23_9b71f41ab5b75b0c7755da965b8a8a33_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- Sample260924-fwls4aef56
- SHA256 368b352352a09dca91da126331f3c45ba65f95b37e5b17571f59fc4d1992c9f3
- MD5 9b71f41ab5b75b0c7755da965b8a8a33
- SHA1 6beeb9b1d554e162058d0efb03cc11e6fba721ca
- SHA512 a6f7b00247f021d45111f6ceed152cd30e0bf9f89f9bfec8b1b1ca5c7d6b2478f1c0e14fb33a4462790fcfe619b2f168c263418d6a67a9c20e8ba9390484505f
- SSDEEP 393216:2lFyfLPHiRE5bx4DMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcb:AUbx4yhpKOxk6lFK
- TLSH T167173309B792D8A5C8301B7C20686313813E1E434F55AAEF5E967B5D4E78AF1C9B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-23_9b71f41ab5b75b0c7755da965b8a8a33_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-23_9b71f41ab5b75b0c7755da965b8a8a33_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- SHA256 368b352352a09dca91da126331f3c45ba65f95b37e5b17571f59fc4d1992c9f3
- MD5 9b71f41ab5b75b0c7755da965b8a8a33
- SHA1 6beeb9b1d554e162058d0efb03cc11e6fba721ca
- SHA512 a6f7b00247f021d45111f6ceed152cd30e0bf9f89f9bfec8b1b1ca5c7d6b2478f1c0e14fb33a4462790fcfe619b2f168c263418d6a67a9c20e8ba9390484505f
- SSDEEP 393216:2lFyfLPHiRE5bx4DMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcb:AUbx4yhpKOxk6lFK
- TLSH T167173309B792D8A5C8301B7C20686313813E1E434F55AAEF5E967B5D4E78AF1C9B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.