General
- Target 2026-10-28_16b1391819c4a421d271499cf7b5ad8b_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 21.0MB
- Sample261030-lnhpcscv4p
- SHA256 c4f277c3da0ed37dde673ad860c449db99e573098d7d00e6b54dc1a63a0ba117
- MD5 16b1391819c4a421d271499cf7b5ad8b
- SHA1 4a6c50d69b2981a3697e6d14f9fdf92b58e227c8
- SHA512 dfef7fb28f08c9214b3f26e494dc8d6a6eb63872c480a344307890db5c95734dc55523b673ea04c9ab496cd60a74778559318f2819b6498db3583d36042c0f77
- SSDEEP 393216:JK6HiRE5bxpKExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KEy:AUbxpKOxk6lFiPvQ6yhpKT
- TLSH T150273322B79258A2DC749F7C041D6303403F2E47DE98ABEF3BD637694A725F08976852
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-28_16b1391819c4a421d271499cf7b5ad8b_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_16b1391819c4a421d271499cf7b5ad8b_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 21.0MB
- SHA256 c4f277c3da0ed37dde673ad860c449db99e573098d7d00e6b54dc1a63a0ba117
- MD5 16b1391819c4a421d271499cf7b5ad8b
- SHA1 4a6c50d69b2981a3697e6d14f9fdf92b58e227c8
- SHA512 dfef7fb28f08c9214b3f26e494dc8d6a6eb63872c480a344307890db5c95734dc55523b673ea04c9ab496cd60a74778559318f2819b6498db3583d36042c0f77
- SSDEEP 393216:JK6HiRE5bxpKExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KEy:AUbxpKOxk6lFiPvQ6yhpKT
- TLSH T150273322B79258A2DC749F7C041D6303403F2E47DE98ABEF3BD637694A725F08976852
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.