General
- Target 2026-08-19_54e987357ab949008d84b94d5f1e2c8d_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- Sample260819-2tpymax1av
- SHA256 547813ebe135e51667c2ab3a21f9854fa74705a2064830dcaec3a09af7a0c47f
- MD5 54e987357ab949008d84b94d5f1e2c8d
- SHA1 49f70bda6d750cba107a40d659d767aa31cc57c7
- SHA512 39f268dc92328a6aa20e54a5b36dcb781821619f8f6b5f53f1e2b0f8fca60cfc77727d1b4720b6a590f1b6e3d4ba40be369daaaff5c788b72a36091507e2dbc5
- SSDEEP 393216:2lFyfLPHiRE5bxK6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFR:AUbxKPvQ6yhpKOxk6lFR
- TLSH T14D173305B792DCA5C8305B7C20686313813E1E034F55AAEF5F967B594E78AF1CAB3632
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_54e987357ab949008d84b94d5f1e2c8d_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_54e987357ab949008d84b94d5f1e2c8d_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- SHA256 547813ebe135e51667c2ab3a21f9854fa74705a2064830dcaec3a09af7a0c47f
- MD5 54e987357ab949008d84b94d5f1e2c8d
- SHA1 49f70bda6d750cba107a40d659d767aa31cc57c7
- SHA512 39f268dc92328a6aa20e54a5b36dcb781821619f8f6b5f53f1e2b0f8fca60cfc77727d1b4720b6a590f1b6e3d4ba40be369daaaff5c788b72a36091507e2dbc5
- SSDEEP 393216:2lFyfLPHiRE5bxK6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFR:AUbxKPvQ6yhpKOxk6lFR
- TLSH T14D173305B792DCA5C8305B7C20686313813E1E034F55AAEF5F967B594E78AF1CAB3632
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.