General
- Target 2026-08-15_d54ff3901afaa20b3a10ab99b8babb17_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 20.0MB
- Sample260815-fyfpvsfk5y
- SHA256 a639ffb39a01cdd6431dd429af0d50889171eee07d6f619fc334019d7ecfdb6e
- MD5 d54ff3901afaa20b3a10ab99b8babb17
- SHA1 3409f3e2fe19e4f81caefd1dc4f679af7f2544af
- SHA512 67f43e7a3ef4d2aae5451bcea79215acad7ff9729996e64e71c8c192f35c98d04dc86ca570c378b472d98756dbaa4eab23950b0f5caffb153b2a03de008167b6
- SSDEEP 393216:2lFyfLPHiRE5bxrFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVr:AUbxrFiPvQ6yhpKOxk6r
- TLSH T13F273309B79298A5C8305B7C20286313813E1D434F55AAEF5F967B5D4E78AF1CAB3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_d54ff3901afaa20b3a10ab99b8babb17_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_d54ff3901afaa20b3a10ab99b8babb17_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 20.0MB
- SHA256 a639ffb39a01cdd6431dd429af0d50889171eee07d6f619fc334019d7ecfdb6e
- MD5 d54ff3901afaa20b3a10ab99b8babb17
- SHA1 3409f3e2fe19e4f81caefd1dc4f679af7f2544af
- SHA512 67f43e7a3ef4d2aae5451bcea79215acad7ff9729996e64e71c8c192f35c98d04dc86ca570c378b472d98756dbaa4eab23950b0f5caffb153b2a03de008167b6
- SSDEEP 393216:2lFyfLPHiRE5bxrFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVr:AUbxrFiPvQ6yhpKOxk6r
- TLSH T13F273309B79298A5C8305B7C20286313813E1D434F55AAEF5F967B5D4E78AF1CAB3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.