General
- Target 2026-09-29_ee498f90723aea1658e7eb31d62503e9_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- Sample260930-sp6wxavybs
- SHA256 8c8faae6c14f247908c7533ed612058a6bcc1d4a3aff4930121d685409c785ab
- MD5 ee498f90723aea1658e7eb31d62503e9
- SHA1 484b3c1c5578e66be00abf5d23995b29fe0849af
- SHA512 a140c5f14c3c1b8790341e5af457955461145f33e9346880ef98e2a597e747b3f0dde8daed18e60967ef21678bdf22171a1a9cc21c7e4ad006a0664a607b860e
- SSDEEP 393216:JK6HiRE5bxL6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8Wfem:AUbxLPvQ6yhpKOxka
- TLSH T17EF62312B79258A6DC749F3C0419A303403F2E47CE98ABEF3FDA37694A715F18976942
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_ee498f90723aea1658e7eb31d62503e9_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_ee498f90723aea1658e7eb31d62503e9_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- SHA256 8c8faae6c14f247908c7533ed612058a6bcc1d4a3aff4930121d685409c785ab
- MD5 ee498f90723aea1658e7eb31d62503e9
- SHA1 484b3c1c5578e66be00abf5d23995b29fe0849af
- SHA512 a140c5f14c3c1b8790341e5af457955461145f33e9346880ef98e2a597e747b3f0dde8daed18e60967ef21678bdf22171a1a9cc21c7e4ad006a0664a607b860e
- SSDEEP 393216:JK6HiRE5bxL6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8Wfem:AUbxLPvQ6yhpKOxka
- TLSH T17EF62312B79258A6DC749F3C0419A303403F2E47CE98ABEF3FDA37694A715F18976942
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.