General
- Target 2026-08-20_148e1d69570a520168ce70115d27345c_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- Sample260821-dtzk3afp2w
- SHA256 574058f3c2a1ae2d10d94687be9c9b9644a1067b479695d6d17f4a2dd7f02525
- MD5 148e1d69570a520168ce70115d27345c
- SHA1 3967fe2eacd83f0f032ad8eef92b545f87f83b88
- SHA512 d2a2f4e9243ffeb0810062f2c04b43d1b70c604837bceda42ca605080d9d13571e53b265d521380d2fd1176169f36361a8553482547b2161168dac130ec7cfb7
- SSDEEP 393216:JK6HiRE5bxDDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6Qz:AUbxDyhpKOxk6lFiPz
- TLSH T152173322B79258A6DC749F7C041D6303403F2E47CE98ABEF3BD637694A715F089B6852
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_148e1d69570a520168ce70115d27345c_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_148e1d69570a520168ce70115d27345c_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- SHA256 574058f3c2a1ae2d10d94687be9c9b9644a1067b479695d6d17f4a2dd7f02525
- MD5 148e1d69570a520168ce70115d27345c
- SHA1 3967fe2eacd83f0f032ad8eef92b545f87f83b88
- SHA512 d2a2f4e9243ffeb0810062f2c04b43d1b70c604837bceda42ca605080d9d13571e53b265d521380d2fd1176169f36361a8553482547b2161168dac130ec7cfb7
- SSDEEP 393216:JK6HiRE5bxDDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6Qz:AUbxDyhpKOxk6lFiPz
- TLSH T152173322B79258A6DC749F7C041D6303403F2E47CE98ABEF3BD637694A715F089B6852
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.