General
- Target 2026-08-23_a25d7fc63889bcfb13050a069d51a1ec_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- Sample260825-2v9pesfj8y
- SHA256 c6d762fd2fd6bd3a6fcd0b034e3bb922ae0305d47f411275299eeab63d280203
- MD5 a25d7fc63889bcfb13050a069d51a1ec
- SHA1 15747a90ae4b451863694e2a0280acf40d41de10
- SHA512 3b23592d17efdf3f6c60a2d3988013474aac283baaa966e07f91b6f079ea022347f2f0020134a479f341c306b15a110e869191ad9745124bc5bd6018e9bc765f
- SSDEEP 393216:JK6HiRE5bxjFvlQCcv6QaAu5SVDMTNSGI:AUbxjFiPvQ6yG
- TLSH T140D62312B79158A6DCB49F3C0019A303403E2E87DE98AFEF2BDA376D4A715F08977552
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_a25d7fc63889bcfb13050a069d51a1ec_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_a25d7fc63889bcfb13050a069d51a1ec_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- SHA256 c6d762fd2fd6bd3a6fcd0b034e3bb922ae0305d47f411275299eeab63d280203
- MD5 a25d7fc63889bcfb13050a069d51a1ec
- SHA1 15747a90ae4b451863694e2a0280acf40d41de10
- SHA512 3b23592d17efdf3f6c60a2d3988013474aac283baaa966e07f91b6f079ea022347f2f0020134a479f341c306b15a110e869191ad9745124bc5bd6018e9bc765f
- SSDEEP 393216:JK6HiRE5bxjFvlQCcv6QaAu5SVDMTNSGI:AUbxjFiPvQ6yG
- TLSH T140D62312B79158A6DCB49F3C0019A303403E2E87DE98AFEF2BDA376D4A715F08977552
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.