General
- Target 2026-08-15_45dd342d86377ce00b96d1478a471b51_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 12.0MB
- Sample260815-gr7qfaeb62
- SHA256 7297903a4d49662930de63587ff2c537e0baebcc794a0a83e18ddaaaf1a54b29
- MD5 45dd342d86377ce00b96d1478a471b51
- SHA1 55cf58f071b9588b24d79210b2acd3b3cd04d2b3
- SHA512 437513b8c1d0a008c061530751a2035e50bb9b29909cba25772673e12bffcdfeeb9cca5657b738ad0ff1d9bbdc5d522620f2c5c8902416657310b02978ea7a9c
- SSDEEP 196608:JZ872k1AeAi2KOld5bxRATC4C8WfszNpiRVxK65DzLlQCcHsJs:JK6HiRE5bxuTzC8WfeIRVlFvlQCct
- TLSH T181C62322B79258A2DCB4AF7C04196303413F2E87DE98AFEF3AD6376949715F08977442
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_45dd342d86377ce00b96d1478a471b51_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_45dd342d86377ce00b96d1478a471b51_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 12.0MB
- SHA256 7297903a4d49662930de63587ff2c537e0baebcc794a0a83e18ddaaaf1a54b29
- MD5 45dd342d86377ce00b96d1478a471b51
- SHA1 55cf58f071b9588b24d79210b2acd3b3cd04d2b3
- SHA512 437513b8c1d0a008c061530751a2035e50bb9b29909cba25772673e12bffcdfeeb9cca5657b738ad0ff1d9bbdc5d522620f2c5c8902416657310b02978ea7a9c
- SSDEEP 196608:JZ872k1AeAi2KOld5bxRATC4C8WfszNpiRVxK65DzLlQCcHsJs:JK6HiRE5bxuTzC8WfeIRVlFvlQCct
- TLSH T181C62322B79258A2DCB4AF7C04196303413F2E87DE98AFEF3AD6376949715F08977442
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.