General
- Target 2026-11-10_96e0768d32b616283e73f20cd5a5d2c5_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- Sample261110-g35efsdd72
- SHA256 8e20eed0ffa265b480eea3da9c7df58a15bd534b62785430010b1a1c5f865ac8
- MD5 96e0768d32b616283e73f20cd5a5d2c5
- SHA1 001695450f5bfdc85cdc60ab29cae0ed8cb7b01b
- SHA512 235d92970cfe3b3a6e462cef5c4c9535e5306ee6100c6bff1d5826c0107282cd4ea4e40623a62c08cbfb3bf992d4d76821cb2e4d0eb04289b8aa5072cbd2d260
- SSDEEP 393216:JK6HiRE5bxP6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5f:AUbxPPvQ6yhpKOxk6lFiPvQf
- TLSH T1CE373312F79258A2D8749F3C0419A303403F2E47DE98AFEF3BDA37694A715F08976952
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-10_96e0768d32b616283e73f20cd5a5d2c5_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-10_96e0768d32b616283e73f20cd5a5d2c5_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- SHA256 8e20eed0ffa265b480eea3da9c7df58a15bd534b62785430010b1a1c5f865ac8
- MD5 96e0768d32b616283e73f20cd5a5d2c5
- SHA1 001695450f5bfdc85cdc60ab29cae0ed8cb7b01b
- SHA512 235d92970cfe3b3a6e462cef5c4c9535e5306ee6100c6bff1d5826c0107282cd4ea4e40623a62c08cbfb3bf992d4d76821cb2e4d0eb04289b8aa5072cbd2d260
- SSDEEP 393216:JK6HiRE5bxP6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5f:AUbxPPvQ6yhpKOxk6lFiPvQf
- TLSH T1CE373312F79258A2D8749F3C0419A303403F2E47DE98AFEF3BDA37694A715F08976952
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.