General
- Target 2026-10-26_584eff39ce18b3fac56e3b0eaaf48e06_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- Sample261027-vdhfaats5k
- SHA256 a7d292f56f2fba81623afed6d31524262cc69299dad934359419118f9867b0f1
- MD5 584eff39ce18b3fac56e3b0eaaf48e06
- SHA1 81ee2b75f8ffb24d4698ed3d1e8462d6cacd1e54
- SHA512 400a8cb367b4e1b6a44303ea41385026918971ba6de3d7b19521c97fa12dee53c0469661647c92c8424a41162fe13afe6acb804cf6d3ff8232ede30cabc68939
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxvQCcHsJcQvQaT0u5SHvOYDMi:2lFyfLPHiRE5bxvQCcv6QaAu5SVDMi
- TLSH T1EAB62305B79299B5C8301B7C2028A313813E1E434F65AAEF5E967B5D4E78AF1C5B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_584eff39ce18b3fac56e3b0eaaf48e06_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_584eff39ce18b3fac56e3b0eaaf48e06_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- SHA256 a7d292f56f2fba81623afed6d31524262cc69299dad934359419118f9867b0f1
- MD5 584eff39ce18b3fac56e3b0eaaf48e06
- SHA1 81ee2b75f8ffb24d4698ed3d1e8462d6cacd1e54
- SHA512 400a8cb367b4e1b6a44303ea41385026918971ba6de3d7b19521c97fa12dee53c0469661647c92c8424a41162fe13afe6acb804cf6d3ff8232ede30cabc68939
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxvQCcHsJcQvQaT0u5SHvOYDMi:2lFyfLPHiRE5bxvQCcv6QaAu5SVDMi
- TLSH T1EAB62305B79299B5C8301B7C2028A313813E1E434F65AAEF5E967B5D4E78AF1C5B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.