General
- Target 2026-08-25_642adbd0aee2b8786dc7b50e20a4e2b9_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- Sample260826-3amvlavydv
- SHA256 133db2376f7609cc65f83d166f5b39d2238c04f0a697dbffad4e0dfea5a3cf9d
- MD5 642adbd0aee2b8786dc7b50e20a4e2b9
- SHA1 db8c1ec2dc8842db3962f40209141db740b3178a
- SHA512 6bea9d76c89e4d4af8738f857024873af5671d5c2ff3d1f253e22c778d746d2f972256761f380f70f1f4cc08f8fc2fa9c521b04b721c2629ec590942250de26d
- SSDEEP 393216:JK6HiRE5bxVVrl3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KEd:AUbx3pKOxk6lFiPvQ6yhpKOx5
- TLSH T12C373322B79258A6D8749F7C04196303403F2E47CE98ABEF3BD6376D4A715F189B6843
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_642adbd0aee2b8786dc7b50e20a4e2b9_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_642adbd0aee2b8786dc7b50e20a4e2b9_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- SHA256 133db2376f7609cc65f83d166f5b39d2238c04f0a697dbffad4e0dfea5a3cf9d
- MD5 642adbd0aee2b8786dc7b50e20a4e2b9
- SHA1 db8c1ec2dc8842db3962f40209141db740b3178a
- SHA512 6bea9d76c89e4d4af8738f857024873af5671d5c2ff3d1f253e22c778d746d2f972256761f380f70f1f4cc08f8fc2fa9c521b04b721c2629ec590942250de26d
- SSDEEP 393216:JK6HiRE5bxVVrl3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KEd:AUbx3pKOxk6lFiPvQ6yhpKOx5
- TLSH T12C373322B79258A6D8749F7C04196303403F2E47CE98ABEF3BD6376D4A715F189B6843
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.