General
- Target 2026-08-20_32bc1a687944ec8a0c69340bd5a3b594_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- Sample260821-dplteafn4x
- SHA256 a780bb37421e2ca88e7b32a984af28161f067c868fefa2aa53ad5b102a25915f
- MD5 32bc1a687944ec8a0c69340bd5a3b594
- SHA1 20e4ddce6b653b9664d6f8116adc871d64238194
- SHA512 42f465bd29f2c1e17e494b9d45250687946f6f60e30ed85b8c929e11c95176be5682fa8f72b63230ff2bf3675b417723b1c507946fbe8be00b59cd4875f7ce6c
- SSDEEP 393216:JK6HiRE5bx3vlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WS:AUbx3iPvQ6yhpKOxkl
- TLSH T103F63322B79258A6D8749F3C0419A303403F2E47CE98ABEF3FD6376D4A715F08976952
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_32bc1a687944ec8a0c69340bd5a3b594_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_32bc1a687944ec8a0c69340bd5a3b594_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- SHA256 a780bb37421e2ca88e7b32a984af28161f067c868fefa2aa53ad5b102a25915f
- MD5 32bc1a687944ec8a0c69340bd5a3b594
- SHA1 20e4ddce6b653b9664d6f8116adc871d64238194
- SHA512 42f465bd29f2c1e17e494b9d45250687946f6f60e30ed85b8c929e11c95176be5682fa8f72b63230ff2bf3675b417723b1c507946fbe8be00b59cd4875f7ce6c
- SSDEEP 393216:JK6HiRE5bx3vlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WS:AUbx3iPvQ6yhpKOxkl
- TLSH T103F63322B79258A6D8749F3C0419A303403F2E47CE98ABEF3FD6376D4A715F08976952
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.