General
- Target 2026-11-09_39cd39866b3f8607a5243faa554d356a_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- Sample261110-2c9lpsss8m
- SHA256 af72237adb39aac6edf71948a6c4f489a8baa474c0b1f5bce0829a3105d6ff48
- MD5 39cd39866b3f8607a5243faa554d356a
- SHA1 cce4da815347ac4c9e75ea09aea407c10c1952f3
- SHA512 6173169f457e395e15c4393d8443e06e175dfdbed21e46add7a2e0a8f005b5bbe5620472104fdbaf68886ef87695eb7e2fabad6247198dc28e85edffc87fae0d
- SSDEEP 393216:JK6HiRE5bxQJzATzC8WfeIRVlFvlQCcv6QaAu5SVs:AUbxik6lFiPvQ6s
- TLSH T1FCF63312B79158A2DCB49F3C04196303413F2E87DE98AFEF2ADA3B694A715F08977543
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-09_39cd39866b3f8607a5243faa554d356a_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-09_39cd39866b3f8607a5243faa554d356a_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- SHA256 af72237adb39aac6edf71948a6c4f489a8baa474c0b1f5bce0829a3105d6ff48
- MD5 39cd39866b3f8607a5243faa554d356a
- SHA1 cce4da815347ac4c9e75ea09aea407c10c1952f3
- SHA512 6173169f457e395e15c4393d8443e06e175dfdbed21e46add7a2e0a8f005b5bbe5620472104fdbaf68886ef87695eb7e2fabad6247198dc28e85edffc87fae0d
- SSDEEP 393216:JK6HiRE5bxQJzATzC8WfeIRVlFvlQCcv6QaAu5SVs:AUbxik6lFiPvQ6s
- TLSH T1FCF63312B79158A2DCB49F3C04196303413F2E87DE98AFEF2ADA3B694A715F08977543
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.