General
- Target 2026-08-19_478b6cce86055f162365372be3657eea_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- Sample260820-aqtzmaxaje
- SHA256 9b06daaed5d66e97fbf8a7359295f269f9d21adad32705ffcd6e66fd06003264
- MD5 478b6cce86055f162365372be3657eea
- SHA1 b865a93df8f30e4496f8b930262724944a693003
- SHA512 2ca9c36c759aaf69e57b02baae0bca3a807ef22b746e644af389f633035de11996ef2fb7d5946bcba988273dbd3c80c270bb33b44585eb9ee7a067ecb0b32104
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxiJzATC4C8WfszNpiRVxK65DzG:2lFyfLPHiRE5bxiJzATzC8WfeIRVlFq
- TLSH T127B62306B792D965C8302B7C20686313823E1D434F65ABEF5E927B5D4E78AF1C9B3532
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_478b6cce86055f162365372be3657eea_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_478b6cce86055f162365372be3657eea_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- SHA256 9b06daaed5d66e97fbf8a7359295f269f9d21adad32705ffcd6e66fd06003264
- MD5 478b6cce86055f162365372be3657eea
- SHA1 b865a93df8f30e4496f8b930262724944a693003
- SHA512 2ca9c36c759aaf69e57b02baae0bca3a807ef22b746e644af389f633035de11996ef2fb7d5946bcba988273dbd3c80c270bb33b44585eb9ee7a067ecb0b32104
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxiJzATC4C8WfszNpiRVxK65DzG:2lFyfLPHiRE5bxiJzATzC8WfeIRVlFq
- TLSH T127B62306B792D965C8302B7C20686313823E1D434F65ABEF5E927B5D4E78AF1C9B3532
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.