General
- Target 2026-09-24_1df1911480f4311872dd07dd0796f77b_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 17.0MB
- Sample260925-q7dlzaee67
- SHA256 5b41c2efcbaabf323fdbade9a8247854c5e2c9a4a2f5e78d42e24c8b25fa8d20
- MD5 1df1911480f4311872dd07dd0796f77b
- SHA1 29d405d361f45649b2ceb7f4a376c7085beb5d9e
- SHA512 f4270f6177a957a7b7f4a9e5c27b60d35055fa42a08fb8115a9d1a47fb2d00db4e91e61e484aed83345d396acf308b115f42f301dfc4aeab6dfd0524a6bfd1c4
- SSDEEP 393216:JK6HiRE5bx4l3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SO:AUbx4pKOxk6lFiPvQz
- TLSH T1D3072312B79258A2D8B49F7C04196303413F2E87DE98AFEF3BD6376D4AB15F08976442
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_1df1911480f4311872dd07dd0796f77b_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_1df1911480f4311872dd07dd0796f77b_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 17.0MB
- SHA256 5b41c2efcbaabf323fdbade9a8247854c5e2c9a4a2f5e78d42e24c8b25fa8d20
- MD5 1df1911480f4311872dd07dd0796f77b
- SHA1 29d405d361f45649b2ceb7f4a376c7085beb5d9e
- SHA512 f4270f6177a957a7b7f4a9e5c27b60d35055fa42a08fb8115a9d1a47fb2d00db4e91e61e484aed83345d396acf308b115f42f301dfc4aeab6dfd0524a6bfd1c4
- SSDEEP 393216:JK6HiRE5bx4l3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SO:AUbx4pKOxk6lFiPvQz
- TLSH T1D3072312B79258A2D8B49F7C04196303413F2E87DE98AFEF3BD6376D4AB15F08976442
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.