General
- Target 2026-08-23_5afe45884c893ca31acb7e49048a2934_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- Sample260824-m7treastgs
- SHA256 853a7b0bfb4ff00a0141c0211f567da05f0a060a9dbd525654864dfba2a9c1f6
- MD5 5afe45884c893ca31acb7e49048a2934
- SHA1 a110ca3e28a08c9b410e2e864001b7b743a3dea6
- SHA512 b4b9579c540efd73f1e16a5e8adb34dc43548f95df5e96d753018dd43ec8ed8f2c40dd98442da40931d9054f6937349fc36989956a8e5159a0526111299549fd
- SSDEEP 393216:2lFyfLPHiRE5bxsrl3KExL3JzATzC8WfeIRVlFvlQCcC:AUbxApKOxk6lFP
- TLSH T1ABE6230AB7929C61C8302B7C20286317813E1D434F65AAEF5E927B5D4E78AF1C9B3577
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_5afe45884c893ca31acb7e49048a2934_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_5afe45884c893ca31acb7e49048a2934_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- SHA256 853a7b0bfb4ff00a0141c0211f567da05f0a060a9dbd525654864dfba2a9c1f6
- MD5 5afe45884c893ca31acb7e49048a2934
- SHA1 a110ca3e28a08c9b410e2e864001b7b743a3dea6
- SHA512 b4b9579c540efd73f1e16a5e8adb34dc43548f95df5e96d753018dd43ec8ed8f2c40dd98442da40931d9054f6937349fc36989956a8e5159a0526111299549fd
- SSDEEP 393216:2lFyfLPHiRE5bxsrl3KExL3JzATzC8WfeIRVlFvlQCcC:AUbxApKOxk6lFP
- TLSH T1ABE6230AB7929C61C8302B7C20286317813E1D434F65AAEF5E927B5D4E78AF1C9B3577
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.