General
- Target 2026-08-25_6cfe1b5b1df50d5d1f09b49810b2f7ca_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- Sample260826-16sdvavvev
- SHA256 17af93cb4e35b430f597d6b6870f4de0c5a3c4bf54930bdbb0d60aa9df4e0e7d
- MD5 6cfe1b5b1df50d5d1f09b49810b2f7ca
- SHA1 5361257709484b8ff39bc46fb5d5ed1327e084d5
- SHA512 5838ce670c0f5f3cfbc5c16fc0a12dadcd348012fd304cd61f6cb2b595ca22236ed8b6c9f217a4b20480c342d20cc6f606c793fea725355d8fbae5602776176d
- SSDEEP 393216:2lFyfLPHiRE5bxPcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8Wa:AUbxSPvQ6yhpKOxkl
- TLSH T104F62305B792D8A5C8301B7C20686313813E1E034F55AAEF5F967B5D4E78AF1CAB3636
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_6cfe1b5b1df50d5d1f09b49810b2f7ca_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_6cfe1b5b1df50d5d1f09b49810b2f7ca_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 15.0MB
- SHA256 17af93cb4e35b430f597d6b6870f4de0c5a3c4bf54930bdbb0d60aa9df4e0e7d
- MD5 6cfe1b5b1df50d5d1f09b49810b2f7ca
- SHA1 5361257709484b8ff39bc46fb5d5ed1327e084d5
- SHA512 5838ce670c0f5f3cfbc5c16fc0a12dadcd348012fd304cd61f6cb2b595ca22236ed8b6c9f217a4b20480c342d20cc6f606c793fea725355d8fbae5602776176d
- SSDEEP 393216:2lFyfLPHiRE5bxPcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8Wa:AUbxSPvQ6yhpKOxkl
- TLSH T104F62305B792D8A5C8301B7C20686313813E1E034F55AAEF5F967B5D4E78AF1CAB3636
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.