General
- Target 2026-08-27_d7c12f7e26d9067cc299f0d2ae075497_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- Sample260827-jblt5sem6y
- SHA256 59ed8b083c8e4b2ceffbd9fcd6b07506757ce3eb48ec729731a898d12a7b120b
- MD5 d7c12f7e26d9067cc299f0d2ae075497
- SHA1 5655e929eb29f3276136efb9747e0aa0a7b0813b
- SHA512 20250b7542953a7455cbfe7fdcb3ce0ded392f77318dba484b343cdc72344e93725cbe46d565347496fd58b9b2973d44f7a26b46d686d5d7190d2e0b044460c3
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxlK65DzLlQCcHsJcQvQaT0u5g:2lFyfLPHiRE5bxRFvlQCcv6QaAu5g
- TLSH T19FB62306B79298B5C8306B7C20246313813E1E434F69AEEF5E967B5D4A78AF1C5B3533
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_d7c12f7e26d9067cc299f0d2ae075497_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_d7c12f7e26d9067cc299f0d2ae075497_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- SHA256 59ed8b083c8e4b2ceffbd9fcd6b07506757ce3eb48ec729731a898d12a7b120b
- MD5 d7c12f7e26d9067cc299f0d2ae075497
- SHA1 5655e929eb29f3276136efb9747e0aa0a7b0813b
- SHA512 20250b7542953a7455cbfe7fdcb3ce0ded392f77318dba484b343cdc72344e93725cbe46d565347496fd58b9b2973d44f7a26b46d686d5d7190d2e0b044460c3
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxlK65DzLlQCcHsJcQvQaT0u5g:2lFyfLPHiRE5bxRFvlQCcv6QaAu5g
- TLSH T19FB62306B79298B5C8306B7C20246313813E1E434F69AEEF5E967B5D4A78AF1C5B3533
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.