General
- Target 2026-08-27_92d8d9196bb4d4db1184315e46e53747_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- Sample260827-ps5apsvcrg
- SHA256 fc32520f002fb0058d05efdea07330c5dc6c2cb723e9b9dffba3709d17271a30
- MD5 92d8d9196bb4d4db1184315e46e53747
- SHA1 1a7688cacc1c1941a141ce619890aecc571df81a
- SHA512 5081feaca5a1636b60bd33afdb21728a220bf5e68be2296cb078ebd34920808957c58548be948cd14befd2898e4f867fbae4d01db96965baf838ef0e8cad6149
- SSDEEP 393216:JK6HiRE5bxZeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVg:AUbxLlFiPvQ6yhpKOxk6g
- TLSH T13C373322B79158A2DC749F7C04196303413F2E47DE98AFEF3BD637A949B15F089B6842
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_92d8d9196bb4d4db1184315e46e53747_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_92d8d9196bb4d4db1184315e46e53747_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- SHA256 fc32520f002fb0058d05efdea07330c5dc6c2cb723e9b9dffba3709d17271a30
- MD5 92d8d9196bb4d4db1184315e46e53747
- SHA1 1a7688cacc1c1941a141ce619890aecc571df81a
- SHA512 5081feaca5a1636b60bd33afdb21728a220bf5e68be2296cb078ebd34920808957c58548be948cd14befd2898e4f867fbae4d01db96965baf838ef0e8cad6149
- SSDEEP 393216:JK6HiRE5bxZeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVg:AUbxLlFiPvQ6yhpKOxk6g
- TLSH T13C373322B79158A2DC749F7C04196303413F2E47DE98AFEF3BD637A949B15F089B6842
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.