General
- Target 2026-08-15_47daa5940f8e8bc6aa946a882fc0a0c3_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- Sample260816-azbveaxtgx
- SHA256 ebd2a58c79dcd96913d6617c25618aa98701a7e612c08eb9be4dacb5f5abffdf
- MD5 47daa5940f8e8bc6aa946a882fc0a0c3
- SHA1 05e41251e9010890fde82b2fd2838d9b7785d976
- SHA512 1d95ddcaa361ec8cf56b4e00c3f61e81a427cbc0554183ae660b7efff620413408f310ae946197ce8435e125f7c713c4d059cbf3aad2d951c518c68556637161
- SSDEEP 393216:JK6HiRE5bxpMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5Sk:AUbxUhpKOxk6lFiPvQb
- TLSH T164173322F79258A6D8749F7C04196303403F2E47DE98ABEF3BD6376D4A725F08976842
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_47daa5940f8e8bc6aa946a882fc0a0c3_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_47daa5940f8e8bc6aa946a882fc0a0c3_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- SHA256 ebd2a58c79dcd96913d6617c25618aa98701a7e612c08eb9be4dacb5f5abffdf
- MD5 47daa5940f8e8bc6aa946a882fc0a0c3
- SHA1 05e41251e9010890fde82b2fd2838d9b7785d976
- SHA512 1d95ddcaa361ec8cf56b4e00c3f61e81a427cbc0554183ae660b7efff620413408f310ae946197ce8435e125f7c713c4d059cbf3aad2d951c518c68556637161
- SSDEEP 393216:JK6HiRE5bxpMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5Sk:AUbxUhpKOxk6lFiPvQb
- TLSH T164173322F79258A6D8749F7C04196303403F2E47DE98ABEF3BD6376D4A725F08976842
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.