General
- Target 2026-08-16_b5ccaa2566f53af474090ca32d10c7ac_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- Sample260817-atmpqagf74
- SHA256 9b38b07eadc23048bbc917de8b8308e14655c648bf96a826d0d7a7cdc445381a
- MD5 b5ccaa2566f53af474090ca32d10c7ac
- SHA1 ebe29d5864db5290196b7b2fa76e377946306073
- SHA512 8af6a6f1300f05c65e1a3b5e4240dd738d623b23295447031eb94041a5a2a1f60be86cf50e1337578c3c1d12d584b2853844f1b061d9aad2175286ff386b2581
- SSDEEP 393216:2lFyfLPHiRE5bxaeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC0:AUbxElFiPvQ6yhpKOxM
- TLSH T1B4173309B7A29CA5C8305B7C20286313813E1D434F55AAEF5F967B594E78AF1C9B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_b5ccaa2566f53af474090ca32d10c7ac_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_b5ccaa2566f53af474090ca32d10c7ac_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- SHA256 9b38b07eadc23048bbc917de8b8308e14655c648bf96a826d0d7a7cdc445381a
- MD5 b5ccaa2566f53af474090ca32d10c7ac
- SHA1 ebe29d5864db5290196b7b2fa76e377946306073
- SHA512 8af6a6f1300f05c65e1a3b5e4240dd738d623b23295447031eb94041a5a2a1f60be86cf50e1337578c3c1d12d584b2853844f1b061d9aad2175286ff386b2581
- SSDEEP 393216:2lFyfLPHiRE5bxaeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC0:AUbxElFiPvQ6yhpKOxM
- TLSH T1B4173309B7A29CA5C8305B7C20286313813E1D434F55AAEF5F967B594E78AF1C9B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.