General
- Target 2026-08-27_0d76b5a4b9c3c3acf15ca4a65caa6016_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 17.0MB
- Sample260827-22d64a1fnh
- SHA256 c1b3756dfd0625d8ec7623576292419dac678c035bf521bf7ffb97cda3086688
- MD5 0d76b5a4b9c3c3acf15ca4a65caa6016
- SHA1 d7767e6f9d296a08fd6e1a16654f0c982f3fee35
- SHA512 77b96119b045216362d6259a301621c814d34cf1b37cf8aba4e7aaf0ecccc2e2e44fd42698b9723eff9bf2d4fe93800cdf6346e44f2e3cf8c807d5acdf210a1d
- SSDEEP 393216:2lFyfLPHiRE5bxnl3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5Sw:AUbxnpKOxk6lFiPvQN
- TLSH T15A07330AB79298A1C8305B7C20286317813E1D434F65AAEF5F927B5D4E78AF1C9B3573
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_0d76b5a4b9c3c3acf15ca4a65caa6016_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_0d76b5a4b9c3c3acf15ca4a65caa6016_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 17.0MB
- SHA256 c1b3756dfd0625d8ec7623576292419dac678c035bf521bf7ffb97cda3086688
- MD5 0d76b5a4b9c3c3acf15ca4a65caa6016
- SHA1 d7767e6f9d296a08fd6e1a16654f0c982f3fee35
- SHA512 77b96119b045216362d6259a301621c814d34cf1b37cf8aba4e7aaf0ecccc2e2e44fd42698b9723eff9bf2d4fe93800cdf6346e44f2e3cf8c807d5acdf210a1d
- SSDEEP 393216:2lFyfLPHiRE5bxnl3KExL3JzATzC8WfeIRVlFvlQCcv6QaAu5Sw:AUbxnpKOxk6lFiPvQN
- TLSH T15A07330AB79298A1C8305B7C20286317813E1D434F65AAEF5F927B5D4E78AF1C9B3573
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.