General
- Target 2026-09-29_44e8d6c14e6336b92e214a4b6adbd73e_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- Sample260930-1dr8daag52
- SHA256 2fdce7bfa2090e9edd00a13c1f8cc152ae3d69055b4a37d3c5695cae5f096459
- MD5 44e8d6c14e6336b92e214a4b6adbd73e
- SHA1 1251dc41febe99cc99889960b94062ac9b584570
- SHA512 f159f9fdd9563f01b542639ecac18d81828fe7760c8b53b1b1696aa53fb45d6247caf3e08464df2f685c4a662476e03c83f6f3f8d0563ca65bd47fd477eb5819
- SSDEEP 393216:2lFyfLPHiRE5bxQDMTNSG/lVrl3KExL3JzATzC8WfeIRVi:AUbxQyhpKOxk6i
- TLSH T162E62309B792DD65C8301B7C20686313813E1E034F55AAEF6E967B5D4E78AF1C9B3632
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_44e8d6c14e6336b92e214a4b6adbd73e_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_44e8d6c14e6336b92e214a4b6adbd73e_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- SHA256 2fdce7bfa2090e9edd00a13c1f8cc152ae3d69055b4a37d3c5695cae5f096459
- MD5 44e8d6c14e6336b92e214a4b6adbd73e
- SHA1 1251dc41febe99cc99889960b94062ac9b584570
- SHA512 f159f9fdd9563f01b542639ecac18d81828fe7760c8b53b1b1696aa53fb45d6247caf3e08464df2f685c4a662476e03c83f6f3f8d0563ca65bd47fd477eb5819
- SSDEEP 393216:2lFyfLPHiRE5bxQDMTNSG/lVrl3KExL3JzATzC8WfeIRVi:AUbxQyhpKOxk6i
- TLSH T162E62309B792DD65C8301B7C20686313813E1E034F55AAEF6E967B5D4E78AF1C9B3632
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.