General
- Target 2026-08-18_48c28ff91ed641b282bf72c08ca65d78_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 11.0MB
- Sample260818-csghesthmd
- SHA256 ce233683730ca47693882622f3ae9d79a71f668ce0b8b67d6ec560762b8cb3ea
- MD5 48c28ff91ed641b282bf72c08ca65d78
- SHA1 e7b5bab4898bb02f66ad49b8eed120d24f8ba9d5
- SHA512 a0c8f1ec020b2785b4db410b9852dc15b3212c2a249cadbbe1ecf293a32b4c2038418d0df1e96684de72c2f5fdfa2cac02ac9f4111ba65bf8b62f9b0ee766e19
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxuaT0u5SHvOYDMVByQyVG/uzGNVyAl3K8fCGnbPE:2lFyfLPHiRE5bxuaAu5SVDMTNSG/lVr4
- TLSH T17CC62305B792DCA5C8301B7C2064A313813A1E034F956AEF5F967B5D4E78AF1CAB3636
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_48c28ff91ed641b282bf72c08ca65d78_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_48c28ff91ed641b282bf72c08ca65d78_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 11.0MB
- SHA256 ce233683730ca47693882622f3ae9d79a71f668ce0b8b67d6ec560762b8cb3ea
- MD5 48c28ff91ed641b282bf72c08ca65d78
- SHA1 e7b5bab4898bb02f66ad49b8eed120d24f8ba9d5
- SHA512 a0c8f1ec020b2785b4db410b9852dc15b3212c2a249cadbbe1ecf293a32b4c2038418d0df1e96684de72c2f5fdfa2cac02ac9f4111ba65bf8b62f9b0ee766e19
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxuaT0u5SHvOYDMVByQyVG/uzGNVyAl3K8fCGnbPE:2lFyfLPHiRE5bxuaAu5SVDMTNSG/lVr4
- TLSH T17CC62305B792DCA5C8301B7C2064A313813A1E034F956AEF5F967B5D4E78AF1CAB3636
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.