General
- Target 2026-08-21_4b0857b16e770a879d6ac86655c3ee92_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- Sample260822-sy4g5swbpc
- SHA256 db0b450a40eb11b351cd9ebf411a914dcb572dcc94e84a35bb0574e91d945bf7
- MD5 4b0857b16e770a879d6ac86655c3ee92
- SHA1 32959b355f828d9bb1f741e766976bbd5a1f2295
- SHA512 d77e8a160066a7793bf286986f21219fd318ac4bed5f81000bf6fde45127874b3267aa93390b288f3a518642283a8f646bc3ade73073f4f0c97aff68cd9cbf15
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxWbP3JzATC4C8WfszNpiRVxK65L:2lFyfLPHiRE5bxWL3JzATzC8WfeIRVlN
- TLSH T11DB62309B792DC65C8302B7C20686317813E1E434F65AAEF5E927B5D4E78AF1C9B3532
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_4b0857b16e770a879d6ac86655c3ee92_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_4b0857b16e770a879d6ac86655c3ee92_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- SHA256 db0b450a40eb11b351cd9ebf411a914dcb572dcc94e84a35bb0574e91d945bf7
- MD5 4b0857b16e770a879d6ac86655c3ee92
- SHA1 32959b355f828d9bb1f741e766976bbd5a1f2295
- SHA512 d77e8a160066a7793bf286986f21219fd318ac4bed5f81000bf6fde45127874b3267aa93390b288f3a518642283a8f646bc3ade73073f4f0c97aff68cd9cbf15
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxWbP3JzATC4C8WfszNpiRVxK65L:2lFyfLPHiRE5bxWL3JzATzC8WfeIRVlN
- TLSH T11DB62309B792DC65C8302B7C20686317813E1E434F65AAEF5E927B5D4E78AF1C9B3532
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.