General
- Target 2026-08-21_44303478b6fb17886b49ad4d459c1207_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- Sample260822-tcd6sshp8v
- SHA256 ef2de12d522ca1343e304ae7d256efc425d25b255cca1f36c01182737781dd15
- MD5 44303478b6fb17886b49ad4d459c1207
- SHA1 da62ae3fb05c8edaf75aed2c1169450261b3485d
- SHA512 2dbb5cc9321c51ba335694e2c9a85b18d540f574d2e5f74761d59949eb750b3476edf625f72929faca9288b5f5f0789af413675b6b5b435a5d047a0050f7215c
- SSDEEP 196608:JZ872k1AeAi2KOld5bxRdszNpiRVxK65DzLlQCcHsJcQvQaT0u5SHG:JK6HiRE5bxPeIRVlFvlQCcv6QaAu5Sm
- TLSH T158D62312B39258A2D8B49F7C0419A303413F2E87DE98AFEF3BD637694A715F08977452
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_44303478b6fb17886b49ad4d459c1207_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_44303478b6fb17886b49ad4d459c1207_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- SHA256 ef2de12d522ca1343e304ae7d256efc425d25b255cca1f36c01182737781dd15
- MD5 44303478b6fb17886b49ad4d459c1207
- SHA1 da62ae3fb05c8edaf75aed2c1169450261b3485d
- SHA512 2dbb5cc9321c51ba335694e2c9a85b18d540f574d2e5f74761d59949eb750b3476edf625f72929faca9288b5f5f0789af413675b6b5b435a5d047a0050f7215c
- SSDEEP 196608:JZ872k1AeAi2KOld5bxRdszNpiRVxK65DzLlQCcHsJcQvQaT0u5SHG:JK6HiRE5bxPeIRVlFvlQCcv6QaAu5Sm
- TLSH T158D62312B39258A2D8B49F7C0419A303413F2E87DE98AFEF3BD637694A715F08977452
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.