General
- Target 2026-10-14_c7e5682919a5492f7249b4abf5341f07_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- Sample261014-pg3yhaga53
- SHA256 05223995b0c72424efa961294b7b6387e99d692f2a170a7fc306c44a8d6a44a0
- MD5 c7e5682919a5492f7249b4abf5341f07
- SHA1 639888b61fbc0b202cd9f80ce4e4ea2c0e5c0344
- SHA512 9bba6bf967b9069985cf04d2cb7580b70bdae6b9079bf461bd918db3525ef36b44c888d2a5c3d06a629f08c7c6cb407ae64491883e630be19dd23e5a680ca151
- SSDEEP 393216:2lFyfLPHiRE5bxAvlQCcv6QaAu5SVDMTNSG/lVrl3KEW:AUbxAiPvQ6yhpKV
- TLSH T1CEE62305B79298B4C8301B7C2024A313813E1E435F65AAEF5F967B594E78AF1C6B3637
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-14_c7e5682919a5492f7249b4abf5341f07_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-14_c7e5682919a5492f7249b4abf5341f07_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- SHA256 05223995b0c72424efa961294b7b6387e99d692f2a170a7fc306c44a8d6a44a0
- MD5 c7e5682919a5492f7249b4abf5341f07
- SHA1 639888b61fbc0b202cd9f80ce4e4ea2c0e5c0344
- SHA512 9bba6bf967b9069985cf04d2cb7580b70bdae6b9079bf461bd918db3525ef36b44c888d2a5c3d06a629f08c7c6cb407ae64491883e630be19dd23e5a680ca151
- SSDEEP 393216:2lFyfLPHiRE5bxAvlQCcv6QaAu5SVDMTNSG/lVrl3KEW:AUbxAiPvQ6yhpKV
- TLSH T1CEE62305B79298B4C8301B7C2024A313813E1E435F65AAEF5F967B594E78AF1C6B3637
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.