General
- Target 2026-08-19_2af41fe38f2007dc06ca89253f44d566_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 11.0MB
- Sample260819-249qsabl5v
- SHA256 b7c2f391a61abcbf4cbc2160aad0f0787f57742809ffc25ecfebf69cef8bbd7c
- MD5 2af41fe38f2007dc06ca89253f44d566
- SHA1 18a24031ce2be2dde53a4c23b97716376d52ac7e
- SHA512 a104c8d48cd3f7161d760cfa321fc95eb398486b9ef55328298e02841357490db32ae680a96beb4011ccd7b6a410647418629d10bd4835325a40e34a20cae24f
- SSDEEP 196608:JZ872k1AeAi2KOld5bxRBOYDMVByQyVG/uzGNVyAl3K8fCGnbP3JzATC4C8Wi:JK6HiRE5bx1DMTNSG/lVrl3KExL3JzA9
- TLSH T179C62321B79258A6DC749F7C10196303403E2E47CE98ABEF3FD6376D4A725F189B6812
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_2af41fe38f2007dc06ca89253f44d566_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_2af41fe38f2007dc06ca89253f44d566_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 11.0MB
- SHA256 b7c2f391a61abcbf4cbc2160aad0f0787f57742809ffc25ecfebf69cef8bbd7c
- MD5 2af41fe38f2007dc06ca89253f44d566
- SHA1 18a24031ce2be2dde53a4c23b97716376d52ac7e
- SHA512 a104c8d48cd3f7161d760cfa321fc95eb398486b9ef55328298e02841357490db32ae680a96beb4011ccd7b6a410647418629d10bd4835325a40e34a20cae24f
- SSDEEP 196608:JZ872k1AeAi2KOld5bxRBOYDMVByQyVG/uzGNVyAl3K8fCGnbP3JzATC4C8Wi:JK6HiRE5bx1DMTNSG/lVrl3KExL3JzA9
- TLSH T179C62321B79258A6DC749F7C10196303403E2E47CE98ABEF3FD6376D4A725F189B6812
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.