General
- Target 2026-08-23_5d437742864357d6966530615bd04bbf_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- Sample260824-mz476swfpd
- SHA256 e35e1465a2c2367cd04baf59828d5a949db3211cd547d0400402fe5d8c8ccc44
- MD5 5d437742864357d6966530615bd04bbf
- SHA1 f4d1e4e61f718abc63165058e58d8b4155e03fca
- SHA512 abb3d6f345aec8aa58f5eeda9fee885eb65f3dd80bf8a4e9e2ccc707046c9e11144462e58584beec8ac6b69958f55af2807711cf811bf999116716d42f078048
- SSDEEP 393216:JK6HiRE5bxURVlFvlQCcv6QaAu5SVDMTNSG/lVrlK:AUbxalFiPvQ6yhs
- TLSH T144F62322B79158A6DCB49F7C0019A303403F2E43DE98AFEF3BDA37694A715F08976552
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_5d437742864357d6966530615bd04bbf_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_5d437742864357d6966530615bd04bbf_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- SHA256 e35e1465a2c2367cd04baf59828d5a949db3211cd547d0400402fe5d8c8ccc44
- MD5 5d437742864357d6966530615bd04bbf
- SHA1 f4d1e4e61f718abc63165058e58d8b4155e03fca
- SHA512 abb3d6f345aec8aa58f5eeda9fee885eb65f3dd80bf8a4e9e2ccc707046c9e11144462e58584beec8ac6b69958f55af2807711cf811bf999116716d42f078048
- SSDEEP 393216:JK6HiRE5bxURVlFvlQCcv6QaAu5SVDMTNSG/lVrlK:AUbxalFiPvQ6yhs
- TLSH T144F62322B79158A6DCB49F7C0019A303403F2E43DE98AFEF3BDA37694A715F08976552
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.