General
- Target 2026-10-17_af71717e916d63a745580f6d23e36c46_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- Sample261018-1cs4aahv9n
- SHA256 59e4e75df3ef0a00e9c2f3b539828a7cb6ee6cbfd8a415431bbebb997e6a8d74
- MD5 af71717e916d63a745580f6d23e36c46
- SHA1 58f02ed3d451faa4076c7dd9bf1e7780f41e5fa6
- SHA512 673397e34123653923c020d54846e9b297e84688b65bbddc6723149cafdd7de307dc7c02c2e8433c55443f57b4074e1a42d3c14ea376d22be60d99077cefe193
- SSDEEP 393216:2lFyfLPHiRE5bx1FvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3Jq:AUbx1FiPvQ6yhpKO0
- TLSH T1EBF63305B7A298A5C8305B7C20246313813E1E438F55AAEF5F967B5D4E78AF1C6B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-17_af71717e916d63a745580f6d23e36c46_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-17_af71717e916d63a745580f6d23e36c46_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- SHA256 59e4e75df3ef0a00e9c2f3b539828a7cb6ee6cbfd8a415431bbebb997e6a8d74
- MD5 af71717e916d63a745580f6d23e36c46
- SHA1 58f02ed3d451faa4076c7dd9bf1e7780f41e5fa6
- SHA512 673397e34123653923c020d54846e9b297e84688b65bbddc6723149cafdd7de307dc7c02c2e8433c55443f57b4074e1a42d3c14ea376d22be60d99077cefe193
- SSDEEP 393216:2lFyfLPHiRE5bx1FvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3Jq:AUbx1FiPvQ6yhpKO0
- TLSH T1EBF63305B7A298A5C8305B7C20246313813E1E438F55AAEF5F967B5D4E78AF1C6B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.