General
- Target 2026-08-21_20986831cef73fa05c3161e451d61dcc_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- Sample260822-wltzqaap8s
- SHA256 a0734f145dc03bb9a638af177f4d4dd8af58c00c04fade2c778e5133235a41f5
- MD5 20986831cef73fa05c3161e451d61dcc
- SHA1 dea846f0b0e7d33567a0de4102345c3654c25547
- SHA512 ce8618f8cd25f455086040dfff872b2e03c8c58b24f4be94f05df92ff30f8ab2273b1635871e1a8425a98ffad0363ed577ee552f741c53dfc342413f73180400
- SSDEEP 393216:JK6HiRE5bxLDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6QA:AUbxLyhpKOxk6lFiPA
- TLSH T185173322B79258A2DC749F7C04196303403F2E47DE98AFEF3BD637694A715F089B6942
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_20986831cef73fa05c3161e451d61dcc_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_20986831cef73fa05c3161e451d61dcc_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- SHA256 a0734f145dc03bb9a638af177f4d4dd8af58c00c04fade2c778e5133235a41f5
- MD5 20986831cef73fa05c3161e451d61dcc
- SHA1 dea846f0b0e7d33567a0de4102345c3654c25547
- SHA512 ce8618f8cd25f455086040dfff872b2e03c8c58b24f4be94f05df92ff30f8ab2273b1635871e1a8425a98ffad0363ed577ee552f741c53dfc342413f73180400
- SSDEEP 393216:JK6HiRE5bxLDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcv6QA:AUbxLyhpKOxk6lFiPA
- TLSH T185173322B79258A2DC749F7C04196303403F2E47DE98AFEF3BD637694A715F089B6942
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.