General
- Target 2026-10-22_a87a21bcec576763d112eed62c9f4176_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- Sample261024-bvyn2sez9v
- SHA256 265cf9fee03b9b4fa2934879b7bcab7c40357d35c9ab1e1103f4189e8942e253
- MD5 a87a21bcec576763d112eed62c9f4176
- SHA1 77c0d751d6a5f6512a0bdf70eead6b8b1b8d51a5
- SHA512 508b263d708252076627de8c9e8acbb8210ae66329169bff4acba16182742b01b25dec895059c5cc4417093f32af263e1630c334918850272b13702a4e2c1b9b
- SSDEEP 196608:JZ872k1AeAi2KOld5bxR8ByQyVG/uzGNVyAl3K8fCGnbP3JzATC4C8WZ:JK6HiRE5bxKNSG/lVrl3KExL3JzATzCp
- TLSH T1D2B62322B79258A2DC749F7C04196303403F2E47CE98ABEF3BD6376D4A725F18976852
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_a87a21bcec576763d112eed62c9f4176_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_a87a21bcec576763d112eed62c9f4176_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- SHA256 265cf9fee03b9b4fa2934879b7bcab7c40357d35c9ab1e1103f4189e8942e253
- MD5 a87a21bcec576763d112eed62c9f4176
- SHA1 77c0d751d6a5f6512a0bdf70eead6b8b1b8d51a5
- SHA512 508b263d708252076627de8c9e8acbb8210ae66329169bff4acba16182742b01b25dec895059c5cc4417093f32af263e1630c334918850272b13702a4e2c1b9b
- SSDEEP 196608:JZ872k1AeAi2KOld5bxR8ByQyVG/uzGNVyAl3K8fCGnbP3JzATC4C8WZ:JK6HiRE5bxKNSG/lVrl3KExL3JzATzCp
- TLSH T1D2B62322B79258A2DC749F7C04196303403F2E47CE98ABEF3BD6376D4A725F18976852
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.