General
- Target 2026-08-20_b054ab1756372c3f83c22a14fb06dc6a_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- Sample260821-c3bd6afk4t
- SHA256 8da1b333f32d7c29bd80b5314c1f1c7596843faa5a4b5f514289cda35e49e37b
- MD5 b054ab1756372c3f83c22a14fb06dc6a
- SHA1 236dfa507943726717413955f0b9ccae3e6b7ab2
- SHA512 68c8371075b24c9ec21aad4f6316d05dfbeaf7c87d13881dbb69da6d503114a57c6c77450b311d7dfb8b50519ea6ea4c04c4f79631e8e605f11d4fa68ce98e91
- SSDEEP 393216:JK6HiRE5bxqFvlQCcv6QaAu5SVDMTNSG/lV9:AUbxqFiPvQ6y/
- TLSH T124E62312B79158A6DCB49F3C0019A303403F2E47DE98AFEF2BDA376D4A715F08976952
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_b054ab1756372c3f83c22a14fb06dc6a_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_b054ab1756372c3f83c22a14fb06dc6a_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- SHA256 8da1b333f32d7c29bd80b5314c1f1c7596843faa5a4b5f514289cda35e49e37b
- MD5 b054ab1756372c3f83c22a14fb06dc6a
- SHA1 236dfa507943726717413955f0b9ccae3e6b7ab2
- SHA512 68c8371075b24c9ec21aad4f6316d05dfbeaf7c87d13881dbb69da6d503114a57c6c77450b311d7dfb8b50519ea6ea4c04c4f79631e8e605f11d4fa68ce98e91
- SSDEEP 393216:JK6HiRE5bxqFvlQCcv6QaAu5SVDMTNSG/lV9:AUbxqFiPvQ6y/
- TLSH T124E62312B79158A6DCB49F3C0019A303403F2E47DE98AFEF2BDA376D4A715F08976952
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.