General
- Target 2026-08-25_a527186684b19d394d6936b35b7a1f34_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 17.0MB
- Sample260826-r2spdaer2w
- SHA256 603e925ad9ecb43c75ee6c311c33a974304f71c59c5fefff3931f4b9a9cd046a
- MD5 a527186684b19d394d6936b35b7a1f34
- SHA1 022b2ca1942a83a01373a10c55f8cb91f1f20049
- SHA512 f264d824ca83cca6bc75e4f8ed9ba510c6dc7986ad87ca28b761fe05e0222e3a3f7dbc815995b850f6b768038af2b007b0b2c1c255217248a96ed9f373f92557
- SSDEEP 393216:JK6HiRE5bxoL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMz:AUbxExk6lFiPvQ6W
- TLSH T1EB073322F79158A6DCB49F3C04196303413E2E87CE98AFEF2AD63B694A715F08977543
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_a527186684b19d394d6936b35b7a1f34_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_a527186684b19d394d6936b35b7a1f34_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 17.0MB
- SHA256 603e925ad9ecb43c75ee6c311c33a974304f71c59c5fefff3931f4b9a9cd046a
- MD5 a527186684b19d394d6936b35b7a1f34
- SHA1 022b2ca1942a83a01373a10c55f8cb91f1f20049
- SHA512 f264d824ca83cca6bc75e4f8ed9ba510c6dc7986ad87ca28b761fe05e0222e3a3f7dbc815995b850f6b768038af2b007b0b2c1c255217248a96ed9f373f92557
- SSDEEP 393216:JK6HiRE5bxoL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMz:AUbxExk6lFiPvQ6W
- TLSH T1EB073322F79158A6DCB49F3C04196303413E2E87CE98AFEF2AD63B694A715F08977543
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.