General
- Target 2026-08-16_17a77c6339475c0ad88974f26019ea26_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 12.0MB
- Sample260816-ke41katxaz
- SHA256 c8c3bc3ecea0777b5cc499135d16f692d14f643852d2626ffa683a57a1eedd9f
- MD5 17a77c6339475c0ad88974f26019ea26
- SHA1 ddcc8e8f9e726761780cc2501d8cb81cd44d131e
- SHA512 b3350ae25bf343f5e807892ffe6bcc39c301f249c413e1b1416183ff4cd400596177009fb326ee8f2bd3ceaf22231a8ecb9ef5f4958c2387cff4cb5ca9848d4d
- SSDEEP 196608:JZ872k1AeAi2KOld5bxRrbP3JzATC4C8WfszNpiRVxK65DzLlQCcb:JK6HiRE5bxhL3JzATzC8WfeIRVlFvlQ1
- TLSH T1C4C62312B79258A2DCB4AF7C04196303413E2E87CE98AFEF7AD63B6D49715F08977442
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_17a77c6339475c0ad88974f26019ea26_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_17a77c6339475c0ad88974f26019ea26_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 12.0MB
- SHA256 c8c3bc3ecea0777b5cc499135d16f692d14f643852d2626ffa683a57a1eedd9f
- MD5 17a77c6339475c0ad88974f26019ea26
- SHA1 ddcc8e8f9e726761780cc2501d8cb81cd44d131e
- SHA512 b3350ae25bf343f5e807892ffe6bcc39c301f249c413e1b1416183ff4cd400596177009fb326ee8f2bd3ceaf22231a8ecb9ef5f4958c2387cff4cb5ca9848d4d
- SSDEEP 196608:JZ872k1AeAi2KOld5bxRrbP3JzATC4C8WfszNpiRVxK65DzLlQCcb:JK6HiRE5bxhL3JzATzC8WfeIRVlFvlQ1
- TLSH T1C4C62312B79258A2DCB4AF7C04196303413E2E87CE98AFEF7AD63B6D49715F08977442
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.