General
- Target 2026-08-23_c2cfb248925d9c3fac632512c23d184e_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- Sample260823-17se8sbd62
- SHA256 aab1e7d056896121e326b4bfcfd641f4ad632470e1d6824eadc033b92b0e77a1
- MD5 c2cfb248925d9c3fac632512c23d184e
- SHA1 83b5811605754680b520f0918a6113a45f25fae6
- SHA512 c58f7774f50b4e6a14b986b32a0a71ce84b334a56a3e2c0c17a9646e5bf33cba8f43ba0db7a49f59a15cc60b9ead0c75b8fbcaccd99fedccd0ca262123aadca8
- SSDEEP 393216:2lFyfLPHiRE5bx+Au5SVDMTNSG/lVrl3KExL3JzATzC8Wfe6:AUbx7Q6yhpKOxk2
- TLSH T1F6E62309B792DD65C8301B7C20686313813E0D034F55AAEF6E967B5D4E78AF1CAB3636
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_c2cfb248925d9c3fac632512c23d184e_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_c2cfb248925d9c3fac632512c23d184e_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- SHA256 aab1e7d056896121e326b4bfcfd641f4ad632470e1d6824eadc033b92b0e77a1
- MD5 c2cfb248925d9c3fac632512c23d184e
- SHA1 83b5811605754680b520f0918a6113a45f25fae6
- SHA512 c58f7774f50b4e6a14b986b32a0a71ce84b334a56a3e2c0c17a9646e5bf33cba8f43ba0db7a49f59a15cc60b9ead0c75b8fbcaccd99fedccd0ca262123aadca8
- SSDEEP 393216:2lFyfLPHiRE5bx+Au5SVDMTNSG/lVrl3KExL3JzATzC8Wfe6:AUbx7Q6yhpKOxk2
- TLSH T1F6E62309B792DD65C8301B7C20686313813E0D034F55AAEF6E967B5D4E78AF1CAB3636
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.