General
- Target 2026-08-25_717e9d3f7a897b31ad567fc60a12089a_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- Sample260826-1k2emafe96
- SHA256 9344805880d1b2729e612234e6130444240f35372875d5c0f7a7ca7a4ecfe94b
- MD5 717e9d3f7a897b31ad567fc60a12089a
- SHA1 a2a33ca25a3081314f3cf618c822215cba75bed1
- SHA512 d5d4512b6603b4fec4ed49d5a6fa6f91466b475eb0804ff4a68b7464e0100fc9f8cf655b18713d3ecef7f8638a5599340f3e42c0fc5efbf22ff55ba0461f2eb7
- SSDEEP 393216:2lFyfLPHiRE5bxoDMTNSG/lVrl3KExL3JzATzC8WfeIRVe:AUbxoyhpKOxk6e
- TLSH T199E62319B7929C65C8301B7C20686313813E1E034F55AAEF6F967B5D4E78AF1C9B3632
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_717e9d3f7a897b31ad567fc60a12089a_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_717e9d3f7a897b31ad567fc60a12089a_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 14.0MB
- SHA256 9344805880d1b2729e612234e6130444240f35372875d5c0f7a7ca7a4ecfe94b
- MD5 717e9d3f7a897b31ad567fc60a12089a
- SHA1 a2a33ca25a3081314f3cf618c822215cba75bed1
- SHA512 d5d4512b6603b4fec4ed49d5a6fa6f91466b475eb0804ff4a68b7464e0100fc9f8cf655b18713d3ecef7f8638a5599340f3e42c0fc5efbf22ff55ba0461f2eb7
- SSDEEP 393216:2lFyfLPHiRE5bxoDMTNSG/lVrl3KExL3JzATzC8WfeIRVe:AUbxoyhpKOxk6e
- TLSH T199E62319B7929C65C8301B7C20686313813E1E034F55AAEF6F967B5D4E78AF1C9B3632
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.