General
- Target 2026-08-18_840474048d3db0eb9283712a26a94086_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- Sample260818-ch9ffseh27
- SHA256 a636cd037080fc42cafa6e1148324c6fba3b437371d8f7432af4ce52e674305e
- MD5 840474048d3db0eb9283712a26a94086
- SHA1 738a1af4abd4b49a7e9cf46da2bda3963366bc5d
- SHA512 ec9e92f56b20101c249b8c66e6a4828984c500f5fd7bd942b40e68198a71d1b4a0d958eb8db6689d5f331ab30e430e4d4f43aaa8908869536b4709cf783e05f3
- SSDEEP 393216:JK6HiRE5bx4l3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExLw:AUbx4pKOxk6lFiPvQ6yhpKOxO
- TLSH T176373322B79258A6D8749F7C04196303403F2E47CE98ABEF3BD6376D4A715F189B6843
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_840474048d3db0eb9283712a26a94086_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_840474048d3db0eb9283712a26a94086_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- SHA256 a636cd037080fc42cafa6e1148324c6fba3b437371d8f7432af4ce52e674305e
- MD5 840474048d3db0eb9283712a26a94086
- SHA1 738a1af4abd4b49a7e9cf46da2bda3963366bc5d
- SHA512 ec9e92f56b20101c249b8c66e6a4828984c500f5fd7bd942b40e68198a71d1b4a0d958eb8db6689d5f331ab30e430e4d4f43aaa8908869536b4709cf783e05f3
- SSDEEP 393216:JK6HiRE5bx4l3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExLw:AUbx4pKOxk6lFiPvQ6yhpKOxO
- TLSH T176373322B79258A6D8749F7C04196303403F2E47CE98ABEF3BD6376D4A715F189B6843
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.