General
- Target 2026-08-27_da6e490da42adc18d204ebc2e95d31d7_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- Sample260827-h44d8ael41
- SHA256 5a35c3b744aff68f4d868ec3f2c77f41470a1004fc2b518803ae7d433bc3e7b8
- MD5 da6e490da42adc18d204ebc2e95d31d7
- SHA1 8c3752e88f8f49a7bbd0028a99ccd4d69643da89
- SHA512 00c289623d5cabfe4ba79e0cde98c818adf0def9ae4218421f654efac5035bd725a060a304561ec8cf989c7f7a90f2131218522a1565321e180cd213a8acc149
- SSDEEP 393216:2lFyfLPHiRE5bx2eIRVlFvlQCcv6QaAu5SVDMTNSG/lVa:AUbxYlFiPvQ6yc
- TLSH T101F63305B7A29CB5C8301B7C20246313813E1E435F65AAEF5F967B594E78AF1C6B3632
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_da6e490da42adc18d204ebc2e95d31d7_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_da6e490da42adc18d204ebc2e95d31d7_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 16.0MB
- SHA256 5a35c3b744aff68f4d868ec3f2c77f41470a1004fc2b518803ae7d433bc3e7b8
- MD5 da6e490da42adc18d204ebc2e95d31d7
- SHA1 8c3752e88f8f49a7bbd0028a99ccd4d69643da89
- SHA512 00c289623d5cabfe4ba79e0cde98c818adf0def9ae4218421f654efac5035bd725a060a304561ec8cf989c7f7a90f2131218522a1565321e180cd213a8acc149
- SSDEEP 393216:2lFyfLPHiRE5bx2eIRVlFvlQCcv6QaAu5SVDMTNSG/lVa:AUbxYlFiPvQ6yc
- TLSH T101F63305B7A29CB5C8301B7C20246313813E1E435F65AAEF5F967B594E78AF1C6B3632
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.