General
- Target 2026-08-23_48f354c6870d759e33da8acb34ff1a22_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- Sample260824-pr319atthy
- SHA256 3fee65832a40ca7a36ff32df576e20812d633e203747202c611164b812ff9bca
- MD5 48f354c6870d759e33da8acb34ff1a22
- SHA1 a9e0a2d1b4eaf3b5b98f918c08efbb36ad4d64c9
- SHA512 d79036822a95de6f042cabc0f1116745d45dbae54e5c5acdc4df5423d751ee480121e3dd4b6864048c90e94b5e5be6c3934ea01b8f439b66f04beec9c3297d26
- SSDEEP 393216:2lFyfLPHiRE5bx3eIRVlFvlQCcv6QaAu5Sp:AUbx5lFiPvQM
- TLSH T1AFD6230AF39298B5C8316B7C20246317823E1D434F65AEEF5E967B594A78AF0C5B3533
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_48f354c6870d759e33da8acb34ff1a22_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_48f354c6870d759e33da8acb34ff1a22_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- SHA256 3fee65832a40ca7a36ff32df576e20812d633e203747202c611164b812ff9bca
- MD5 48f354c6870d759e33da8acb34ff1a22
- SHA1 a9e0a2d1b4eaf3b5b98f918c08efbb36ad4d64c9
- SHA512 d79036822a95de6f042cabc0f1116745d45dbae54e5c5acdc4df5423d751ee480121e3dd4b6864048c90e94b5e5be6c3934ea01b8f439b66f04beec9c3297d26
- SSDEEP 393216:2lFyfLPHiRE5bx3eIRVlFvlQCcv6QaAu5Sp:AUbx5lFiPvQM
- TLSH T1AFD6230AF39298B5C8316B7C20246317823E1D434F65AEEF5E967B594A78AF0C5B3533
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.