General
- Target 2026-08-25_d2550c541fe1529ddcfb59dab8ce84a7_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- Sample260826-jv21gaam7v
- SHA256 2bc6da8df5e2de07d2db8959996aa67fcae786a0e383997e3aa713461a2d3a76
- MD5 d2550c541fe1529ddcfb59dab8ce84a7
- SHA1 8216f296d86221708de13c541f86f2efd9baadf5
- SHA512 36abb88ce4e4b1713bd8d739754a0db5af5452e81a699b55db121160992e2c1bf7a76f903ac6495e6916c5b83505244edb8614be8142e9afdc96a45f4fc76d00
- SSDEEP 393216:JK6HiRE5bxVDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFN:AUbxVyhpKOxk6lFN
- TLSH T1ABF62322B79158A2DC749F7C045D6303403F2E47CE98ABEF3BD637A94A715F089B6942
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_d2550c541fe1529ddcfb59dab8ce84a7_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_d2550c541fe1529ddcfb59dab8ce84a7_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- SHA256 2bc6da8df5e2de07d2db8959996aa67fcae786a0e383997e3aa713461a2d3a76
- MD5 d2550c541fe1529ddcfb59dab8ce84a7
- SHA1 8216f296d86221708de13c541f86f2efd9baadf5
- SHA512 36abb88ce4e4b1713bd8d739754a0db5af5452e81a699b55db121160992e2c1bf7a76f903ac6495e6916c5b83505244edb8614be8142e9afdc96a45f4fc76d00
- SSDEEP 393216:JK6HiRE5bxVDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFN:AUbxVyhpKOxk6lFN
- TLSH T1ABF62322B79158A2DC749F7C045D6303403F2E47CE98ABEF3BD637A94A715F089B6942
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.