General
- Target 2026-08-20_a6e798bb3ca8d88e53dc8d9824b0e3ab_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- Sample260821-c4tbcsfk7s
- SHA256 7005883f889b3510dd4a41651e8def7a1352e1dac760a99566b9112ef5cfbbd2
- MD5 a6e798bb3ca8d88e53dc8d9824b0e3ab
- SHA1 fefa7ee5109fa365b517c9a5f9b44f666caa04fe
- SHA512 2300ea90c53965e6575df7f0f1e6d712dc8574b7cfe9e2fcb8e0825031ce73c35e250a5ec29c2583039fd8e476b3ecd82556a404be2f16a680d814a7326ac9a9
- SSDEEP 393216:JK6HiRE5bxUWfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVD:AUbxU6lFiPvQ6yhpKOxk6D
- TLSH T14D373322B79158A2DC749F7C04196303413F2E47CE98AFEF3BD637A949B15F089B6942
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_a6e798bb3ca8d88e53dc8d9824b0e3ab_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_a6e798bb3ca8d88e53dc8d9824b0e3ab_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- SHA256 7005883f889b3510dd4a41651e8def7a1352e1dac760a99566b9112ef5cfbbd2
- MD5 a6e798bb3ca8d88e53dc8d9824b0e3ab
- SHA1 fefa7ee5109fa365b517c9a5f9b44f666caa04fe
- SHA512 2300ea90c53965e6575df7f0f1e6d712dc8574b7cfe9e2fcb8e0825031ce73c35e250a5ec29c2583039fd8e476b3ecd82556a404be2f16a680d814a7326ac9a9
- SSDEEP 393216:JK6HiRE5bxUWfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVD:AUbxU6lFiPvQ6yhpKOxk6D
- TLSH T14D373322B79158A2DC749F7C04196303413F2E47CE98AFEF3BD637A949B15F089B6942
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.