General
- Target 2026-08-20_70fd9cdd21d779c2f8b907d05f339f2e_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 11.0MB
- Sample260821-dds4ca1fnd
- SHA256 b09c0dd90618bf4035d290a76ecf4fb93ccbd8239f3ac4a6bfcd7262f40fba42
- MD5 70fd9cdd21d779c2f8b907d05f339f2e
- SHA1 29e2bd268d9fd8e1e7bc656500b2d35e1b6da1f1
- SHA512 1ca3fa57971d86c1e68caebe5fa499202276d54433ec2e4435df9286bc5e6ab13d50fce6f47d0935b652596d513ba4897a43d368e57d7fdadbb00ca879625917
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxR8WfszNpiRVxK65DzLlQCcHsQ:2lFyfLPHiRE5bxR8WfeIRVlFvlQCcl
- TLSH T135C6230AB79298A4C8312B7C20246317813E1E434F65AEEF5E967B5D4E78AF0C5B3573
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_70fd9cdd21d779c2f8b907d05f339f2e_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_70fd9cdd21d779c2f8b907d05f339f2e_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 11.0MB
- SHA256 b09c0dd90618bf4035d290a76ecf4fb93ccbd8239f3ac4a6bfcd7262f40fba42
- MD5 70fd9cdd21d779c2f8b907d05f339f2e
- SHA1 29e2bd268d9fd8e1e7bc656500b2d35e1b6da1f1
- SHA512 1ca3fa57971d86c1e68caebe5fa499202276d54433ec2e4435df9286bc5e6ab13d50fce6f47d0935b652596d513ba4897a43d368e57d7fdadbb00ca879625917
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxR8WfszNpiRVxK65DzLlQCcHsQ:2lFyfLPHiRE5bxR8WfeIRVlFvlQCcl
- TLSH T135C6230AB79298A4C8312B7C20246317813E1E434F65AEEF5E967B5D4E78AF0C5B3573
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.