General
- Target 2026-09-30_7e5a6ed744e48c391f5a1dfd70efb973_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- Sample261001-nkhw3asyds
- SHA256 cbf37c9b8f229a37bda671765713a56272b2f85959ac34caf3c76450552244dd
- MD5 7e5a6ed744e48c391f5a1dfd70efb973
- SHA1 366e3655a7d0a504d1598155dffdd56abb974012
- SHA512 4ae2a7c0d116719526f1034f67713d4963f70fd1f721bfc5afbc6da02420b7c4bc627e3edb5986ab0ad2623f9e86d58ec1e4b4e09a07aa34d4acb9b05f358024
- SSDEEP 393216:JK6HiRE5bxveIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KEp:AUbxhlFiPvQ6yhpKA
- TLSH T17E173312B79158A2DC749F7C0419A303403F2E47DE98AFEF3BDA37694A715F089B6942
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_7e5a6ed744e48c391f5a1dfd70efb973_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_7e5a6ed744e48c391f5a1dfd70efb973_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- SHA256 cbf37c9b8f229a37bda671765713a56272b2f85959ac34caf3c76450552244dd
- MD5 7e5a6ed744e48c391f5a1dfd70efb973
- SHA1 366e3655a7d0a504d1598155dffdd56abb974012
- SHA512 4ae2a7c0d116719526f1034f67713d4963f70fd1f721bfc5afbc6da02420b7c4bc627e3edb5986ab0ad2623f9e86d58ec1e4b4e09a07aa34d4acb9b05f358024
- SSDEEP 393216:JK6HiRE5bxveIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KEp:AUbxhlFiPvQ6yhpKA
- TLSH T17E173312B79158A2DC749F7C0419A303403F2E47DE98AFEF3BDA37694A715F089B6942
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.