General
- Target 2026-09-29_fd0b945bf6ffed5c484f99cb9ed26340_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- Sample260930-r4vxhswelf
- SHA256 bb3e55a8cb0367b31fffa1764fac0fab6ae610c66a2d288176f319ff79f495f6
- MD5 fd0b945bf6ffed5c484f99cb9ed26340
- SHA1 bbbfa6c79cf6140d8c6eac49b1ce3a9390e1bf66
- SHA512 2588b5ea9efc8cad935dc21077beb313d14011e1df3ba93a22d8c55e77fa86003d07d279aa48f25a54084e165c4e28b8d2dd871ec13464b88baabfc2c55f5c12
- SSDEEP 393216:JK6HiRE5bxK6QaAu5SVDMTNSG/lVrl3KExL3JzATzCk:AUbxKPvQ6yhpKOxM
- TLSH T179D62321B79158A6DC749F7C0419A303403F2E47CE98ABEF3FD6376A4A725F18976812
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_fd0b945bf6ffed5c484f99cb9ed26340_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_fd0b945bf6ffed5c484f99cb9ed26340_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- SHA256 bb3e55a8cb0367b31fffa1764fac0fab6ae610c66a2d288176f319ff79f495f6
- MD5 fd0b945bf6ffed5c484f99cb9ed26340
- SHA1 bbbfa6c79cf6140d8c6eac49b1ce3a9390e1bf66
- SHA512 2588b5ea9efc8cad935dc21077beb313d14011e1df3ba93a22d8c55e77fa86003d07d279aa48f25a54084e165c4e28b8d2dd871ec13464b88baabfc2c55f5c12
- SSDEEP 393216:JK6HiRE5bxK6QaAu5SVDMTNSG/lVrl3KExL3JzATzCk:AUbxKPvQ6yhpKOxM
- TLSH T179D62321B79158A6DC749F7C0419A303403F2E47CE98ABEF3FD6376A4A725F18976812
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.