General
- Target 2026-08-27_d82a66af8eb338fd250528d190a3bf94_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 21.0MB
- Sample260827-jajndsyzhy
- SHA256 51cc8757dd89ad4f90d70d14eb3f12d85715bcc7481571c5ae9d9bdf764ba227
- MD5 d82a66af8eb338fd250528d190a3bf94
- SHA1 139858bfb8eea3e05a236f1fa7f7e91ee5ffc0f4
- SHA512 ea5cc9890c2ad09085abbf5087c7c72e431be593eaeff624fa97c1cec2d9f598689ad7b8af8a3d0d74970faf73d2c34c2afd4e29775d5c20c9758f409f3789b6
- SSDEEP 393216:JK6HiRE5bxAExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KE0:AUbxAOxk6lFiPvQ6yhpKH
- TLSH T1F2273322B79258A6DC749F7C04196303403F2E47CE98ABEF3BD6376D4A715F089B6852
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_d82a66af8eb338fd250528d190a3bf94_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_d82a66af8eb338fd250528d190a3bf94_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 21.0MB
- SHA256 51cc8757dd89ad4f90d70d14eb3f12d85715bcc7481571c5ae9d9bdf764ba227
- MD5 d82a66af8eb338fd250528d190a3bf94
- SHA1 139858bfb8eea3e05a236f1fa7f7e91ee5ffc0f4
- SHA512 ea5cc9890c2ad09085abbf5087c7c72e431be593eaeff624fa97c1cec2d9f598689ad7b8af8a3d0d74970faf73d2c34c2afd4e29775d5c20c9758f409f3789b6
- SSDEEP 393216:JK6HiRE5bxAExL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KE0:AUbxAOxk6lFiPvQ6yhpKH
- TLSH T1F2273322B79258A6DC749F7C04196303403F2E47CE98ABEF3BD6376D4A715F089B6852
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.