General
- Target 2026-08-23_69173894f21d30b0d27478a2156f36ca_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- Sample260824-lsl8caep4w
- SHA256 b1cd05e168dcbd84c3e2362d55d55086ef242b555d3cee076a1eb37d44238004
- MD5 69173894f21d30b0d27478a2156f36ca
- SHA1 341e0961f0aed417b38f6920b357458b13dc544e
- SHA512 8e7319247e90459f7569cf2007f2ab7a42d40968260f8903530ef95b3b26bade37003aed2d8bc0cfe926f9e58a600ff29545dd4063b6934dd4d1ce8ac230a466
- SSDEEP 393216:JK6HiRE5bxSKExL3JzATzC8WfeIRVlFvlQCcv6QaAu5Sy:AUbxSKOxk6lFiPvQ5
- TLSH T1D4F62322F79258A2D8B49F7C04196303413F2E87DE98AFEF3BD6376949715F08976842
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_69173894f21d30b0d27478a2156f36ca_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_69173894f21d30b0d27478a2156f36ca_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- SHA256 b1cd05e168dcbd84c3e2362d55d55086ef242b555d3cee076a1eb37d44238004
- MD5 69173894f21d30b0d27478a2156f36ca
- SHA1 341e0961f0aed417b38f6920b357458b13dc544e
- SHA512 8e7319247e90459f7569cf2007f2ab7a42d40968260f8903530ef95b3b26bade37003aed2d8bc0cfe926f9e58a600ff29545dd4063b6934dd4d1ce8ac230a466
- SSDEEP 393216:JK6HiRE5bxSKExL3JzATzC8WfeIRVlFvlQCcv6QaAu5Sy:AUbxSKOxk6lFiPvQ5
- TLSH T1D4F62322F79258A2D8B49F7C04196303413F2E87DE98AFEF3BD6376949715F08976842
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.