General
- Target 2026-08-25_e76981aa8c983dfdad3256c4d5f1a98f_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- Sample260826-e4xpwsyxdy
- SHA256 0dd7c23a72013a14c29f3ab72942b73c02c92661379ab0e1efdf639ae9e2ba03
- MD5 e76981aa8c983dfdad3256c4d5f1a98f
- SHA1 51d358e19afc7810418af2b2179af65c584f48bb
- SHA512 7ab0d771931a1cfe9c34cc4dd683512d5b0fe6598038e5b3460ffc7ddad60eb3746a37a55b9e2d842053562142e882520fc894570cac1199fe608d01a5c2551b
- SSDEEP 196608:JZ872k1AeAi2KOld5bxR9szNpiRVxK65DzLlQCcHsJcQvQaT0u5SHg:JK6HiRE5bxjeIRVlFvlQCcv6QaAu5SA
- TLSH T1E8D62312B39258A2D8B49F7C0419A303413F2E87DE98AFEF3BD637694A715F08977452
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_e76981aa8c983dfdad3256c4d5f1a98f_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_e76981aa8c983dfdad3256c4d5f1a98f_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 13.0MB
- SHA256 0dd7c23a72013a14c29f3ab72942b73c02c92661379ab0e1efdf639ae9e2ba03
- MD5 e76981aa8c983dfdad3256c4d5f1a98f
- SHA1 51d358e19afc7810418af2b2179af65c584f48bb
- SHA512 7ab0d771931a1cfe9c34cc4dd683512d5b0fe6598038e5b3460ffc7ddad60eb3746a37a55b9e2d842053562142e882520fc894570cac1199fe608d01a5c2551b
- SSDEEP 196608:JZ872k1AeAi2KOld5bxR9szNpiRVxK65DzLlQCcHsJcQvQaT0u5SHg:JK6HiRE5bxjeIRVlFvlQCcv6QaAu5SA
- TLSH T1E8D62312B39258A2D8B49F7C0419A303413F2E87DE98AFEF3BD637694A715F08977452
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.