General
- Target 2026-08-13_e9a803effb503455ecaacc9a22560950_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 12.0MB
- Sample260813-dg33qagd58
- SHA256 afcccc46a5246665dbe2227438a276a16bef731060f8bcd5e331c1f008be3c99
- MD5 e9a803effb503455ecaacc9a22560950
- SHA1 31edfdef4c969af1f294971c1a4d24846ede702f
- SHA512 e7a3fe0c77bec64a36aef7152f7953e417a9cb6ee3807a003c595c0f497b89d5a53fdde12b11624e193884fd8b13b66d03598fa8873747c0f630a54047e5bec5
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxkNpiRVxK65DzLlQCcHsJcQvQaT0u5SHw:2lFyfLPHiRE5bxQIRVlFvlQCcv6QaAu1
- TLSH T1E8C62306B7A298B1C8306B7C20246313813E1E435F65AEEB5F967B5D4A78AF1C5B3533
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_e9a803effb503455ecaacc9a22560950_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_e9a803effb503455ecaacc9a22560950_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 12.0MB
- SHA256 afcccc46a5246665dbe2227438a276a16bef731060f8bcd5e331c1f008be3c99
- MD5 e9a803effb503455ecaacc9a22560950
- SHA1 31edfdef4c969af1f294971c1a4d24846ede702f
- SHA512 e7a3fe0c77bec64a36aef7152f7953e417a9cb6ee3807a003c595c0f497b89d5a53fdde12b11624e193884fd8b13b66d03598fa8873747c0f630a54047e5bec5
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxkNpiRVxK65DzLlQCcHsJcQvQaT0u5SHw:2lFyfLPHiRE5bxQIRVlFvlQCcv6QaAu1
- TLSH T1E8C62306B7A298B1C8306B7C20246313813E1E435F65AEEB5F967B5D4A78AF1C5B3533
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.