General
- Target 2026-09-24_64fdbdda33f6818939184e8ff0a58384_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- Sample260925-ka38gatbpc
- SHA256 830fde1422307213c26c2729198bce5cc11dcb9ea4a891d1c0ed25301bf68f1b
- MD5 64fdbdda33f6818939184e8ff0a58384
- SHA1 7ef7fcad038248e7d7a7e2b74ede2c3615f9bf45
- SHA512 0f8cf41edd9a7aa35134ed7e753cb1804ec72178d1d3dabd73f9659cbf61dba932255f5a1826c26731db26feb575447a17b016030510079d09ec8cb19ee9faab
- SSDEEP 393216:2lFyfLPHiRE5bx7l3KExL3JzATzC8WfeIRVlFvlQCcvW:AUbx7pKOxk6lFiW
- TLSH T177F6230AB7929865C8301B7C20286317813E1D434F69AAEF5F927B5D4E78AF1C9B3573
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_64fdbdda33f6818939184e8ff0a58384_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_64fdbdda33f6818939184e8ff0a58384_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- SHA256 830fde1422307213c26c2729198bce5cc11dcb9ea4a891d1c0ed25301bf68f1b
- MD5 64fdbdda33f6818939184e8ff0a58384
- SHA1 7ef7fcad038248e7d7a7e2b74ede2c3615f9bf45
- SHA512 0f8cf41edd9a7aa35134ed7e753cb1804ec72178d1d3dabd73f9659cbf61dba932255f5a1826c26731db26feb575447a17b016030510079d09ec8cb19ee9faab
- SSDEEP 393216:2lFyfLPHiRE5bx7l3KExL3JzATzC8WfeIRVlFvlQCcvW:AUbx7pKOxk6lFiW
- TLSH T177F6230AB7929865C8301B7C20286317813E1D434F69AAEF5F927B5D4E78AF1C9B3573
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.