General
- Target 2026-08-15_07cda764b4560ae5a9dbd698330966e7_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- Sample260816-bcsp3sar31
- SHA256 e3d2ddec323f0a1dc1ab4a8c2069843c17b3b62a8e48bc816fe9443a15ca1ce0
- MD5 07cda764b4560ae5a9dbd698330966e7
- SHA1 d94d4c44c43d670b83483d8c94806e9ae604b4e7
- SHA512 69cfde975c4ab8c1cf038f2bea27713c5494aae523a89a927795e2bf4d8056aded2e32ac4e7c829435036044499f826710460d457da5209019a39a72fbf22973
- SSDEEP 196608:JZ872k1AeAi2KOld5bxR9K65DzLlQCcHsJcQvQaT0u5SHvOYDMVByQy3:JK6HiRE5bxvFvlQCcv6QaAu5SVDMTNC
- TLSH T1BAD62312F79158A6DCB49F3C00199303403E2E87DE98AFEF2BDA376D4A715F08976952
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_07cda764b4560ae5a9dbd698330966e7_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_07cda764b4560ae5a9dbd698330966e7_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- SHA256 e3d2ddec323f0a1dc1ab4a8c2069843c17b3b62a8e48bc816fe9443a15ca1ce0
- MD5 07cda764b4560ae5a9dbd698330966e7
- SHA1 d94d4c44c43d670b83483d8c94806e9ae604b4e7
- SHA512 69cfde975c4ab8c1cf038f2bea27713c5494aae523a89a927795e2bf4d8056aded2e32ac4e7c829435036044499f826710460d457da5209019a39a72fbf22973
- SSDEEP 196608:JZ872k1AeAi2KOld5bxR9K65DzLlQCcHsJcQvQaT0u5SHvOYDMVByQy3:JK6HiRE5bxvFvlQCcv6QaAu5SVDMTNC
- TLSH T1BAD62312F79158A6DCB49F3C00199303403E2E87DE98AFEF2BDA376D4A715F08976952
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.