General
- Target 2026-08-20_7741ae5f0d6807c3c79a9997176757e3_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- Sample260821-db75gsvyat
- SHA256 fff4e9ca839f0bfa9d0de305597a168694655f2c3e0a644d1d438f2242c5a37c
- MD5 7741ae5f0d6807c3c79a9997176757e3
- SHA1 782312d4238f4278f90aa520e7b17585dce513f0
- SHA512 8277fff013909ac88d10cb646ed374efdb669b778b88023b0a30096b30c5f24b5aa49af763d6f865fc203ef5928d2011539c56fe15961a0b971b036f41a94906
- SSDEEP 393216:2lFyfLPHiRE5bxcKExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lE:AUbxcKOxk6lFiPvQ6yo
- TLSH T12B173309F79298A5C8305B7C20286313813E1E434F65AAEF5E967B5D4E78AF1C5B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_7741ae5f0d6807c3c79a9997176757e3_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_7741ae5f0d6807c3c79a9997176757e3_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- SHA256 fff4e9ca839f0bfa9d0de305597a168694655f2c3e0a644d1d438f2242c5a37c
- MD5 7741ae5f0d6807c3c79a9997176757e3
- SHA1 782312d4238f4278f90aa520e7b17585dce513f0
- SHA512 8277fff013909ac88d10cb646ed374efdb669b778b88023b0a30096b30c5f24b5aa49af763d6f865fc203ef5928d2011539c56fe15961a0b971b036f41a94906
- SSDEEP 393216:2lFyfLPHiRE5bxcKExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lE:AUbxcKOxk6lFiPvQ6yo
- TLSH T12B173309F79298A5C8305B7C20286313813E1E434F65AAEF5E967B5D4E78AF1C5B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.