General
- Target 2026-09-24_0ffe40698092e4d5382a7438d040020f_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- Sample260925-sae5msvse1
- SHA256 c1105eadefd91854c8a994a879c44bc003fb8a212c23eefcf60fb4ad3f9486ef
- MD5 0ffe40698092e4d5382a7438d040020f
- SHA1 e210337b4fce2e255b64be9da0f125af47a26a92
- SHA512 888ffd9fbbb84bcddd6161b49daab82ebf39196290c86433055f05d78b4e064be3d70a332f6fe00f1b81488244bb14ec2834de87ccf3549491e3dfc4e36d6c74
- SSDEEP 393216:2lFyfLPHiRE5bxgExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVr:AUbxgOxk6lFiPvQ6yl
- TLSH T11F173309F79298A5C8305B7C20286313813E1E434F65AAEF5E967B5D4E78AF1C5B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_0ffe40698092e4d5382a7438d040020f_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_0ffe40698092e4d5382a7438d040020f_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- SHA256 c1105eadefd91854c8a994a879c44bc003fb8a212c23eefcf60fb4ad3f9486ef
- MD5 0ffe40698092e4d5382a7438d040020f
- SHA1 e210337b4fce2e255b64be9da0f125af47a26a92
- SHA512 888ffd9fbbb84bcddd6161b49daab82ebf39196290c86433055f05d78b4e064be3d70a332f6fe00f1b81488244bb14ec2834de87ccf3549491e3dfc4e36d6c74
- SSDEEP 393216:2lFyfLPHiRE5bxgExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVr:AUbxgOxk6lFiPvQ6yl
- TLSH T11F173309F79298A5C8305B7C20286313813E1E434F65AAEF5E967B5D4E78AF1C5B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.