General
- Target 2026-10-01_0c9a6b315e68fe439d930ec5f31c22c1_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- Sample261002-y2ewva1ale
- SHA256 f607776f7f6bb3c59500bcc1bb43184eae6ada7fb67ddb101c1c9131f634ef91
- MD5 0c9a6b315e68fe439d930ec5f31c22c1
- SHA1 77156bb7e84d77e0c4be11e9a97e36a09770994b
- SHA512 9dd4d1c4d5854c16b2cf64e84a89d5faab6829d1d91a34c486007f845d0aeeb543b705efa638c4177f701df7db241a0c5db3135874683b36fa4bfa136b007608
- SSDEEP 393216:JK6HiRE5bx65SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVk:AUbxE6yhpKOxk6k
- TLSH T1DCF62322B78158A6DC749F7C04196303403F2E47CE98ABEF3BDA376D4A715F189B6912
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_0c9a6b315e68fe439d930ec5f31c22c1_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_0c9a6b315e68fe439d930ec5f31c22c1_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- SHA256 f607776f7f6bb3c59500bcc1bb43184eae6ada7fb67ddb101c1c9131f634ef91
- MD5 0c9a6b315e68fe439d930ec5f31c22c1
- SHA1 77156bb7e84d77e0c4be11e9a97e36a09770994b
- SHA512 9dd4d1c4d5854c16b2cf64e84a89d5faab6829d1d91a34c486007f845d0aeeb543b705efa638c4177f701df7db241a0c5db3135874683b36fa4bfa136b007608
- SSDEEP 393216:JK6HiRE5bx65SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVk:AUbxE6yhpKOxk6k
- TLSH T1DCF62322B78158A6DC749F7C04196303403F2E47CE98ABEF3BDA376D4A715F189B6912
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.