General
- Target 2026-08-19_c87a1fd06b4aab54912eca9430cffe72_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 11.0MB
- Sample260819-1ytlyaxtax
- SHA256 1b13a8ec10b1b2b20ca748fabb3d8409c47c6a046a975b9eb20d9f3d40809975
- MD5 c87a1fd06b4aab54912eca9430cffe72
- SHA1 b94f41049cad56960e34ab5ce5b05135f9fbe093
- SHA512 43ae933dbb418dac0787185ee30c76001353269ddab9b37f3301f77efae02bdea1e4655827dcc0e3db369c89f78017c8a4dc686175fcfc51a2f933119fd25f04
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bx6VxK65DzLlQCcHsJcQvQaT0u5SHw:2lFyfLPHiRE5bx6VlFvlQCcv6QaAu5SQ
- TLSH T129C62306B79298B5C8306B7C20246313813E1E434F69AEEF5E967B5D4A78AF1C5B3533
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_c87a1fd06b4aab54912eca9430cffe72_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_c87a1fd06b4aab54912eca9430cffe72_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 11.0MB
- SHA256 1b13a8ec10b1b2b20ca748fabb3d8409c47c6a046a975b9eb20d9f3d40809975
- MD5 c87a1fd06b4aab54912eca9430cffe72
- SHA1 b94f41049cad56960e34ab5ce5b05135f9fbe093
- SHA512 43ae933dbb418dac0787185ee30c76001353269ddab9b37f3301f77efae02bdea1e4655827dcc0e3db369c89f78017c8a4dc686175fcfc51a2f933119fd25f04
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bx6VxK65DzLlQCcHsJcQvQaT0u5SHw:2lFyfLPHiRE5bx6VlFvlQCcv6QaAu5SQ
- TLSH T129C62306B79298B5C8306B7C20246313813E1E434F69AEEF5E967B5D4A78AF1C5B3533
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.