General
- Target 2026-09-30_3e4c5c7bbee52387f2ced15ed026a1b0_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- Sample261001-s6gcksfe52
- SHA256 a236417966494e41107f728090684440f76f2f481014c0c26fd67d51cc27899b
- MD5 3e4c5c7bbee52387f2ced15ed026a1b0
- SHA1 0d9f006078f2c1c0eab1d8172e835794451c73d4
- SHA512 6e75417c7adb51adfbb8b22184064ea31a6cddc7b4c022d7e25146b73bba5bea3a150e0a60eb91cb1066cb9e5da1dcf3ff3c12e646be02cc3cae13a795f5096b
- SSDEEP 393216:2lFyfLPHiRE5bxW6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvl/:AUbxWPvQ6yhpKOxk6lFt
- TLSH T163173309B7929CA5C8301B7C20686313813E1D034F55AAEF5F967B5D4E78AF1CAB3636
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_3e4c5c7bbee52387f2ced15ed026a1b0_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_3e4c5c7bbee52387f2ced15ed026a1b0_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- SHA256 a236417966494e41107f728090684440f76f2f481014c0c26fd67d51cc27899b
- MD5 3e4c5c7bbee52387f2ced15ed026a1b0
- SHA1 0d9f006078f2c1c0eab1d8172e835794451c73d4
- SHA512 6e75417c7adb51adfbb8b22184064ea31a6cddc7b4c022d7e25146b73bba5bea3a150e0a60eb91cb1066cb9e5da1dcf3ff3c12e646be02cc3cae13a795f5096b
- SSDEEP 393216:2lFyfLPHiRE5bxW6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvl/:AUbxWPvQ6yhpKOxk6lFt
- TLSH T163173309B7929CA5C8301B7C20686313813E1D034F55AAEF5F967B5D4E78AF1CAB3636
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.