General
- Target 2026-11-03_40e7e7b1b772a9c8c6e1a7e35b219203_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- Sample261104-2mr5eags3n
- SHA256 df0767404e45233af983487c7870cf31f5b1f48f34ae71d3fe48b280a49e0aee
- MD5 40e7e7b1b772a9c8c6e1a7e35b219203
- SHA1 c12683bd19dc6b61dd92d387c3a2ae7ea45da57e
- SHA512 bdb8fae7188fb0a63734fbc95e59b021a2b2838048f2ae0ed4320107cdb322e049c994100b9fbe90fee511229a26a929ed7acd468e88ecbc54e60b1a79c3a271
- SSDEEP 393216:JK6HiRE5bxtDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcvl:AUbxtyhpKOxk6lFil
- TLSH T184173322B79258A6DC749F7C041D6303403F2E47DE98ABEF3BD637694A715F089B6842
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_40e7e7b1b772a9c8c6e1a7e35b219203_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_40e7e7b1b772a9c8c6e1a7e35b219203_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- SHA256 df0767404e45233af983487c7870cf31f5b1f48f34ae71d3fe48b280a49e0aee
- MD5 40e7e7b1b772a9c8c6e1a7e35b219203
- SHA1 c12683bd19dc6b61dd92d387c3a2ae7ea45da57e
- SHA512 bdb8fae7188fb0a63734fbc95e59b021a2b2838048f2ae0ed4320107cdb322e049c994100b9fbe90fee511229a26a929ed7acd468e88ecbc54e60b1a79c3a271
- SSDEEP 393216:JK6HiRE5bxtDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcvl:AUbxtyhpKOxk6lFil
- TLSH T184173322B79258A6DC749F7C041D6303403F2E47DE98ABEF3BD637694A715F089B6842
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.