General
- Target 2026-09-25_cc6d236494b9a5552b163901a96a5c69_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- Sample260925-ya9bdav18l
- SHA256 65fce325f39f6bcca3cf6ca7bac365abcb325bea648ec5fb6a8e8012baecba28
- MD5 cc6d236494b9a5552b163901a96a5c69
- SHA1 8ad1263bebf76e2aeca2efa09c355b0b615396e6
- SHA512 cbc06388c0e3c7b690b988cdd98024aaad1801d008047a04cfd1e0db1db5268ae276edbaca0b0b24abc187ed106a862042841ff355e82894a6091d485f4f0db3
- SSDEEP 393216:JK6HiRE5bxA8WfeIRVlFvlQCcv6QaAu5SVDM2:AUbxL6lFiPvQ6F
- TLSH T125F63322F79118A6DCB49F3C04196303413E2E87DE98AFEF2BDA37694A715F08977542
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-25_cc6d236494b9a5552b163901a96a5c69_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-25_cc6d236494b9a5552b163901a96a5c69_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- SHA256 65fce325f39f6bcca3cf6ca7bac365abcb325bea648ec5fb6a8e8012baecba28
- MD5 cc6d236494b9a5552b163901a96a5c69
- SHA1 8ad1263bebf76e2aeca2efa09c355b0b615396e6
- SHA512 cbc06388c0e3c7b690b988cdd98024aaad1801d008047a04cfd1e0db1db5268ae276edbaca0b0b24abc187ed106a862042841ff355e82894a6091d485f4f0db3
- SSDEEP 393216:JK6HiRE5bxA8WfeIRVlFvlQCcv6QaAu5SVDM2:AUbxL6lFiPvQ6F
- TLSH T125F63322F79118A6DCB49F3C04196303413E2E87DE98AFEF2BDA37694A715F08977542
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.