General
- Target 2026-08-23_ccf1609eca5eeab43a9d57a9ffce6f64_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- Sample260825-1svxtaba44
- SHA256 60650480118d652fa336b81656b013c7e647bdd90a99c49d438ce4869c71c1ab
- MD5 ccf1609eca5eeab43a9d57a9ffce6f64
- SHA1 4708dd4039afddea04e4cec32c772d8424b8e870
- SHA512 d5f9c836664180d8e4dd89a7c67cd4a6130daeef94168edca295615ac6c8d466887e93202373de11234e15b617357205cfe48b73cfc0850bf7baaf34f8ff2e77
- SSDEEP 393216:2lFyfLPHiRE5bxxFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIN:AUbxxFiPvQ6yhpKOxkq
- TLSH T1DE17330AB792D8A5C8305B7C20286313813E1D034F55AAEF5F967B594E78AF1C9B3637
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_ccf1609eca5eeab43a9d57a9ffce6f64_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_ccf1609eca5eeab43a9d57a9ffce6f64_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- SHA256 60650480118d652fa336b81656b013c7e647bdd90a99c49d438ce4869c71c1ab
- MD5 ccf1609eca5eeab43a9d57a9ffce6f64
- SHA1 4708dd4039afddea04e4cec32c772d8424b8e870
- SHA512 d5f9c836664180d8e4dd89a7c67cd4a6130daeef94168edca295615ac6c8d466887e93202373de11234e15b617357205cfe48b73cfc0850bf7baaf34f8ff2e77
- SSDEEP 393216:2lFyfLPHiRE5bxxFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIN:AUbxxFiPvQ6yhpKOxkq
- TLSH T1DE17330AB792D8A5C8305B7C20286313813E1D034F55AAEF5F967B594E78AF1C9B3637
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.