General
- Target 2026-08-17_b174713b40ac7bceb171f8196a250dc7_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- Sample260818-dfjyfsdk6w
- SHA256 8ee2db7d082246edc8788e423b41530d8e6ba203c3915ace96d663e69ff08496
- MD5 b174713b40ac7bceb171f8196a250dc7
- SHA1 c8a27a2cf00730ef70cb17e8dd0246114df16087
- SHA512 926370a12669a179642e1438fab9f9eb300fe71cf1d3bc9e044c9473c93fe6580e48a9d2b7749049c6683ded09d4b3c5280279958b8b294a5a19c1fc52d77f51
- SSDEEP 393216:2lFyfLPHiRE5bxgJzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KE:AUbxyk6lFiPvQ6yhpKE
- TLSH T10E173305B79298B5C8305B7C20286313813E1E434F55AAEF5F967B594E78AF1CAB3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_b174713b40ac7bceb171f8196a250dc7_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_b174713b40ac7bceb171f8196a250dc7_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- SHA256 8ee2db7d082246edc8788e423b41530d8e6ba203c3915ace96d663e69ff08496
- MD5 b174713b40ac7bceb171f8196a250dc7
- SHA1 c8a27a2cf00730ef70cb17e8dd0246114df16087
- SHA512 926370a12669a179642e1438fab9f9eb300fe71cf1d3bc9e044c9473c93fe6580e48a9d2b7749049c6683ded09d4b3c5280279958b8b294a5a19c1fc52d77f51
- SSDEEP 393216:2lFyfLPHiRE5bxgJzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KE:AUbxyk6lFiPvQ6yhpKE
- TLSH T10E173305B79298B5C8305B7C20286313813E1E434F55AAEF5F967B594E78AF1CAB3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.