General
- Target 2026-08-19_ae2401761995ad32069cacaba42fd16c_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- Sample260819-fb7vtsdp4w
- SHA256 c6da1c8800fa533da99397c02a80405213fac67344b840827244fd909168fc27
- MD5 ae2401761995ad32069cacaba42fd16c
- SHA1 3152d1415caad96bc59b1fed8fa8037c76ada122
- SHA512 386265842daa40e9d575f4c6f0f1c0790850521e405492e56b04219d0fbfe790f03ac901ff220d184888b34614be0590b704a43d76578aadced273b1ed161078
- SSDEEP 393216:JK6HiRE5bxqDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFv9:AUbxqyhpKOxk6lFl
- TLSH T12EF63322B79158A6DC749F7C04196303403F2E47CE98ABEF3BD637AD4A715F089B6852
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_ae2401761995ad32069cacaba42fd16c_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_ae2401761995ad32069cacaba42fd16c_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- SHA256 c6da1c8800fa533da99397c02a80405213fac67344b840827244fd909168fc27
- MD5 ae2401761995ad32069cacaba42fd16c
- SHA1 3152d1415caad96bc59b1fed8fa8037c76ada122
- SHA512 386265842daa40e9d575f4c6f0f1c0790850521e405492e56b04219d0fbfe790f03ac901ff220d184888b34614be0590b704a43d76578aadced273b1ed161078
- SSDEEP 393216:JK6HiRE5bxqDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFv9:AUbxqyhpKOxk6lFl
- TLSH T12EF63322B79158A6DC749F7C04196303403F2E47CE98ABEF3BD637AD4A715F089B6852
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.