General
- Target 2026-08-17_b0ab597360e1edc38c664d59daf88c73_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- Sample260818-dfq2rsvcmc
- SHA256 1ab93f9e07fe157ee005c496e83d9dbe99600b90e329c3b5332a9bd6d91cf94d
- MD5 b0ab597360e1edc38c664d59daf88c73
- SHA1 433d018cbf981fbcb19eef137477bee18b5a901d
- SHA512 b3eadf0ad6ee670989774490704f7cd88cd0f7f1137a59748edbf78606887f87294ae8e7ccbc65c6368c3daa28af450aea8f857750c47759592cb6c8554b3be3
- SSDEEP 393216:JK6HiRE5bxnC8WfeIRVlFvlQCcv6QaAu5SVDM3:AUbxd6lFiPvQ6S
- TLSH T10EF63322B79158A2DCB49F3C04196303413F2E87DE98AFEF2BDA37694A715F08977542
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_b0ab597360e1edc38c664d59daf88c73_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_b0ab597360e1edc38c664d59daf88c73_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- SHA256 1ab93f9e07fe157ee005c496e83d9dbe99600b90e329c3b5332a9bd6d91cf94d
- MD5 b0ab597360e1edc38c664d59daf88c73
- SHA1 433d018cbf981fbcb19eef137477bee18b5a901d
- SHA512 b3eadf0ad6ee670989774490704f7cd88cd0f7f1137a59748edbf78606887f87294ae8e7ccbc65c6368c3daa28af450aea8f857750c47759592cb6c8554b3be3
- SSDEEP 393216:JK6HiRE5bxnC8WfeIRVlFvlQCcv6QaAu5SVDM3:AUbxd6lFiPvQ6S
- TLSH T10EF63322B79158A2DCB49F3C04196303413F2E87DE98AFEF2BDA37694A715F08977542
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.