General
- Target 2026-08-19_b29ffece4c477b64a087cb1f7fdba948_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- Sample260819-15a36svbkh
- SHA256 f504e2a04d4ed4201534fef7f496a76f0bf6111fae69fc606650707942abc0f9
- MD5 b29ffece4c477b64a087cb1f7fdba948
- SHA1 f2388db128c629150bcb0651a49591113eabad78
- SHA512 5bebcf7f2282ce9f511f67e3dda74ede5bf982bd58ef4eff5f09742646374f657b76fbac1e837b1d83d108e8d3dd2177fe00db67a7388f36a3d3e91a48dddee8
- SSDEEP 393216:JK6HiRE5bx98WfeIRVlFvlQCcv6QaAu5S6:AUbx66lFiPvQz
- TLSH T174E62312B39258A2DCB4AF7C04196303413F2E87DE98AFEF2BD637694A715F08977542
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_b29ffece4c477b64a087cb1f7fdba948_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_b29ffece4c477b64a087cb1f7fdba948_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- SHA256 f504e2a04d4ed4201534fef7f496a76f0bf6111fae69fc606650707942abc0f9
- MD5 b29ffece4c477b64a087cb1f7fdba948
- SHA1 f2388db128c629150bcb0651a49591113eabad78
- SHA512 5bebcf7f2282ce9f511f67e3dda74ede5bf982bd58ef4eff5f09742646374f657b76fbac1e837b1d83d108e8d3dd2177fe00db67a7388f36a3d3e91a48dddee8
- SSDEEP 393216:JK6HiRE5bx98WfeIRVlFvlQCcv6QaAu5S6:AUbx66lFiPvQz
- TLSH T174E62312B39258A2DCB4AF7C04196303413F2E87DE98AFEF2BD637694A715F08977542
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.