General
- Target 2026-08-20_672938b21d31e8e671f834a9bdafddf2_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- Sample260821-dfnlmsvygs
- SHA256 0e899acdada918898096a734ee1e186ce9765ca14475d4de53df877e7fa5a4c4
- MD5 672938b21d31e8e671f834a9bdafddf2
- SHA1 8141c91ccf06ced759474b9cdfff102a792e3ed1
- SHA512 41c5b8c12a4b19d1c0b95007188a375c50e5ad38d79e1bb89710716181fb29f38ae9d250d6f101aec99caf434d61f9afae41dae36b803b9f40dd6356ee2c9dfb
- SSDEEP 393216:2lFyfLPHiRE5bxpSVDMTNSG/lVrl3KExL3JzATzC8WfeIRV2:AUbxp6yhpKOxk62
- TLSH T12FE62309B792DDA5C8301B7C20686313813E1D034F55AAEF6E967B5D4E78AF1C9B3632
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_672938b21d31e8e671f834a9bdafddf2_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_672938b21d31e8e671f834a9bdafddf2_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- SHA256 0e899acdada918898096a734ee1e186ce9765ca14475d4de53df877e7fa5a4c4
- MD5 672938b21d31e8e671f834a9bdafddf2
- SHA1 8141c91ccf06ced759474b9cdfff102a792e3ed1
- SHA512 41c5b8c12a4b19d1c0b95007188a375c50e5ad38d79e1bb89710716181fb29f38ae9d250d6f101aec99caf434d61f9afae41dae36b803b9f40dd6356ee2c9dfb
- SSDEEP 393216:2lFyfLPHiRE5bxpSVDMTNSG/lVrl3KExL3JzATzC8WfeIRV2:AUbxp6yhpKOxk62
- TLSH T12FE62309B792DDA5C8301B7C20686313813E1D034F55AAEF6E967B5D4E78AF1C9B3632
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.