General
- Target 2026-08-27_1b1c888110c1eca7821cd770a8f19213_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- Sample260827-1typ4a1cqg
- SHA256 82288e0422fda91fc9ccba6b94cde440be89f6dcb94f7935b1930c031bafe57e
- MD5 1b1c888110c1eca7821cd770a8f19213
- SHA1 bf355d1533a58c896c85cf8f84ebbec06f2a54fb
- SHA512 3895b609146542682b539fc68769daa963d9e084855623fa7a5aaf274829379e407f8afc6dfa3234e759d81467e18298999016c16ad2d91c5802c82fc6a0ebe1
- SSDEEP 393216:2lFyfLPHiRE5bxMDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcvv:AUbxMyhpKOxk6lFiv
- TLSH T1CB173309B7929CA5C8301B7C20286313813E1E434F55AAEF5E967B5D4E78AF1C9B3637
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_1b1c888110c1eca7821cd770a8f19213_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_1b1c888110c1eca7821cd770a8f19213_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 18.0MB
- SHA256 82288e0422fda91fc9ccba6b94cde440be89f6dcb94f7935b1930c031bafe57e
- MD5 1b1c888110c1eca7821cd770a8f19213
- SHA1 bf355d1533a58c896c85cf8f84ebbec06f2a54fb
- SHA512 3895b609146542682b539fc68769daa963d9e084855623fa7a5aaf274829379e407f8afc6dfa3234e759d81467e18298999016c16ad2d91c5802c82fc6a0ebe1
- SSDEEP 393216:2lFyfLPHiRE5bxMDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCcvv:AUbxMyhpKOxk6lFiv
- TLSH T1CB173309B7929CA5C8301B7C20286313813E1E434F55AAEF5E967B5D4E78AF1C9B3637
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.