General
- Target 2026-08-17_95aba0513a69d17e13d34be7856fbcb6_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- Sample260818-dlvl5svdrf
- SHA256 12f0042b2e085cd2d0bd45be6dafd1fb390a20bea1096f16c8ebfb569883acfa
- MD5 95aba0513a69d17e13d34be7856fbcb6
- SHA1 fa12572713a75ca78b9f7154e2037ba49d2fd533
- SHA512 0c709d61745efe6095c4667c05e203e5849d19d0947e876537f62fb21a40ccec16705b2b80460ce34c1c207e60988974104deea49b7729430f1ef3ac85411591
- SSDEEP 393216:2lFyfLPHiRE5bxqNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5Sb:AUbxuhpKOxk6lFiPvQY
- TLSH T1CB17330AB792D865C8305B7C20286317813E1D434F65AAEF5F927B5D4A78AF1CAB3533
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_95aba0513a69d17e13d34be7856fbcb6_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_95aba0513a69d17e13d34be7856fbcb6_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- SHA256 12f0042b2e085cd2d0bd45be6dafd1fb390a20bea1096f16c8ebfb569883acfa
- MD5 95aba0513a69d17e13d34be7856fbcb6
- SHA1 fa12572713a75ca78b9f7154e2037ba49d2fd533
- SHA512 0c709d61745efe6095c4667c05e203e5849d19d0947e876537f62fb21a40ccec16705b2b80460ce34c1c207e60988974104deea49b7729430f1ef3ac85411591
- SSDEEP 393216:2lFyfLPHiRE5bxqNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5Sb:AUbxuhpKOxk6lFiPvQY
- TLSH T1CB17330AB792D865C8305B7C20286317813E1D434F65AAEF5F927B5D4A78AF1CAB3533
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.