General
- Target 2026-08-13_a50243db8ec0a1ebbb44f25d068df8f0_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- Sample260813-eke1qsaq5x
- SHA256 8a472bdd5f935df7624409651464ffb6a0ff6e2bde7198cf91afbe552d14e861
- MD5 a50243db8ec0a1ebbb44f25d068df8f0
- SHA1 713d95c5a1ea0ee7548ccce4e1896a6f993f904c
- SHA512 2d6bf590a06952d405d9108a58213facc76d562b0d6d8cf74a30fbe9a3e197de238065a30dc27f55db9034cd815c1e7fee1b11053a1a1a2ef0ac8844280f082d
- SSDEEP 393216:2lFyfLPHiRE5bxeu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRV3:AUbxeQ6yhpKOxk63
- TLSH T1FBF62305B792DDA5C8301B7C20686313813E0E034F55AAEF6E967B5D4E78AF1C9B7632
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_a50243db8ec0a1ebbb44f25d068df8f0_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_a50243db8ec0a1ebbb44f25d068df8f0_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- SHA256 8a472bdd5f935df7624409651464ffb6a0ff6e2bde7198cf91afbe552d14e861
- MD5 a50243db8ec0a1ebbb44f25d068df8f0
- SHA1 713d95c5a1ea0ee7548ccce4e1896a6f993f904c
- SHA512 2d6bf590a06952d405d9108a58213facc76d562b0d6d8cf74a30fbe9a3e197de238065a30dc27f55db9034cd815c1e7fee1b11053a1a1a2ef0ac8844280f082d
- SSDEEP 393216:2lFyfLPHiRE5bxeu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRV3:AUbxeQ6yhpKOxk63
- TLSH T1FBF62305B792DDA5C8301B7C20686313813E0E034F55AAEF6E967B5D4E78AF1C9B7632
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.