General
- Target 2026-08-16_b5f6e1a33ce3ac52af48c3bc108e729f_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 20.0MB
- Sample260816-28586abq4s
- SHA256 c318a4449a2858d9a72b6179b82eaae6bc005b7b8701a7dc851c92102b166c60
- MD5 b5f6e1a33ce3ac52af48c3bc108e729f
- SHA1 c41e5a759a266e9721f11ef1c627a78a1aa3fe0f
- SHA512 53dc42dc5a477274b374e622726e2bef3845d4dba3e9f944d997090c94b4a0421dad37d84a870c047dd629aa52424e7e68ad55c8517ed2a7befe2ecdcb89a551
- SSDEEP 393216:2lFyfLPHiRE5bxoC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATE:AUbxE6lFiPvQ6yhpKOxD
- TLSH T14E273309B79298A5C8305B7C20286313813E1D434F55AAEF5F967B5D4E78AF1CAB3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_b5f6e1a33ce3ac52af48c3bc108e729f_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_b5f6e1a33ce3ac52af48c3bc108e729f_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 20.0MB
- SHA256 c318a4449a2858d9a72b6179b82eaae6bc005b7b8701a7dc851c92102b166c60
- MD5 b5f6e1a33ce3ac52af48c3bc108e729f
- SHA1 c41e5a759a266e9721f11ef1c627a78a1aa3fe0f
- SHA512 53dc42dc5a477274b374e622726e2bef3845d4dba3e9f944d997090c94b4a0421dad37d84a870c047dd629aa52424e7e68ad55c8517ed2a7befe2ecdcb89a551
- SSDEEP 393216:2lFyfLPHiRE5bxoC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATE:AUbxE6lFiPvQ6yhpKOxD
- TLSH T14E273309B79298A5C8305B7C20286313813E1D434F55AAEF5F967B5D4E78AF1CAB3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.