General
- Target 2026-10-03_fdd2bc08f0348dbe3f9aae16e0cd5abf_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- Sample261003-2f3mkaybqa
- SHA256 928fefe7b65e893e20ba1ba5f0361d2ca76f2b9f02560e1d9f0c7ca4e66e1305
- MD5 fdd2bc08f0348dbe3f9aae16e0cd5abf
- SHA1 3841450527731d758d1258192520391ed2243678
- SHA512 551563e114966052a825c630c454bc9137c024ccf0113af420cffbe52586b77d0c06b8fc182afa803841ff70391c07af5323fd1e760da3e4d852da64a7ab0f17
- SSDEEP 196608:JZ872k1AeAi2KOld5bxRqVxK65DzLlQCcHsJcQvQaT0u5SHvOYDMU:JK6HiRE5bxMVlFvlQCcv6QaAu5SVDMU
- TLSH T16AD62322B79158A2DCB49F7C0019A303403E2E87DE98AFEF2BD6376D4A715F08976553
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-03_fdd2bc08f0348dbe3f9aae16e0cd5abf_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-03_fdd2bc08f0348dbe3f9aae16e0cd5abf_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- SHA256 928fefe7b65e893e20ba1ba5f0361d2ca76f2b9f02560e1d9f0c7ca4e66e1305
- MD5 fdd2bc08f0348dbe3f9aae16e0cd5abf
- SHA1 3841450527731d758d1258192520391ed2243678
- SHA512 551563e114966052a825c630c454bc9137c024ccf0113af420cffbe52586b77d0c06b8fc182afa803841ff70391c07af5323fd1e760da3e4d852da64a7ab0f17
- SSDEEP 196608:JZ872k1AeAi2KOld5bxRqVxK65DzLlQCcHsJcQvQaT0u5SHvOYDMU:JK6HiRE5bxMVlFvlQCcv6QaAu5SVDMU
- TLSH T16AD62322B79158A2DCB49F7C0019A303403E2E87DE98AFEF2BD6376D4A715F08976553
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.