General
- Target 2026-08-16_32e39cafff87ee10e47d0f4a125d8b52_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- Sample260816-j43ncstbqf
- SHA256 cdeeda9b879ddf35206b653745ede9fda1e408afe9cc90737ee2ac96cb81a1d9
- MD5 32e39cafff87ee10e47d0f4a125d8b52
- SHA1 e90a162c3d922cfb25352b9743e6cee7f8aee420
- SHA512 e724234862e1647e44d6576416fc282608353ae9403f3577b5d86b9308a7bf78ff7225fa04361f1265ec62de481bd1a42a1b596a531836dee28be788a7591857
- SSDEEP 393216:JK6HiRE5bxoDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6QaU:AUbxoyhpKOxk6lFiPL
- TLSH T1C7173322B79258A6DC749F7C041D6303403F2E47DE98ABEF3BD637694A715F089B6842
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_32e39cafff87ee10e47d0f4a125d8b52_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_32e39cafff87ee10e47d0f4a125d8b52_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- SHA256 cdeeda9b879ddf35206b653745ede9fda1e408afe9cc90737ee2ac96cb81a1d9
- MD5 32e39cafff87ee10e47d0f4a125d8b52
- SHA1 e90a162c3d922cfb25352b9743e6cee7f8aee420
- SHA512 e724234862e1647e44d6576416fc282608353ae9403f3577b5d86b9308a7bf78ff7225fa04361f1265ec62de481bd1a42a1b596a531836dee28be788a7591857
- SSDEEP 393216:JK6HiRE5bxoDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6QaU:AUbxoyhpKOxk6lFiPL
- TLSH T1C7173322B79258A6DC749F7C041D6303403F2E47DE98ABEF3BD637694A715F089B6842
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.