General
- Target 2026-08-17_1513e48addcdd7ff7f2fa2ea02086b93_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- Sample260818-a4e3mashre
- SHA256 13f97e27b320af8a5d1f9e22424a1e39c3c0c61603e8227d8100376e4f8a153c
- MD5 1513e48addcdd7ff7f2fa2ea02086b93
- SHA1 64b0653cc52dafea21e29abd8bfd49764dfbe61c
- SHA512 a4bc0f2fcc757b53f2429182fc8ae0cd2e3036e54ef5bca5b50fa6948aa3c056ec02992f737d1fed695870743e9ba143f17711e39805e8e03e1e18e3248aa303
- SSDEEP 393216:2lFyfLPHiRE5bxTFvlQCcv6QaAu5SVDM+:AUbxTFiPvQ6H
- TLSH T14DD62306B7A698B5C8301B7C20246313813E1E434F69AEEF5E967B594E786F1C5B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_1513e48addcdd7ff7f2fa2ea02086b93_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_1513e48addcdd7ff7f2fa2ea02086b93_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- SHA256 13f97e27b320af8a5d1f9e22424a1e39c3c0c61603e8227d8100376e4f8a153c
- MD5 1513e48addcdd7ff7f2fa2ea02086b93
- SHA1 64b0653cc52dafea21e29abd8bfd49764dfbe61c
- SHA512 a4bc0f2fcc757b53f2429182fc8ae0cd2e3036e54ef5bca5b50fa6948aa3c056ec02992f737d1fed695870743e9ba143f17711e39805e8e03e1e18e3248aa303
- SSDEEP 393216:2lFyfLPHiRE5bxTFvlQCcv6QaAu5SVDM+:AUbxTFiPvQ6H
- TLSH T14DD62306B7A698B5C8301B7C20246313813E1E434F69AEEF5E967B594E786F1C5B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.