General
- Target 2026-08-27_794de5fe581147b5438a4ed141305a60_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- Sample260827-rwmaeaweme
- SHA256 76280fec7822ceac32786df1ec9e9ac26983d1b8212ce18a7b4b564916b67e3c
- MD5 794de5fe581147b5438a4ed141305a60
- SHA1 cb485f816bc18a895e59dc0806c7c8c063a757f6
- SHA512 4ed4fbbfa64acb2fd314dc0d9b65f07366240d4f305571c3bd8a546f763b39797d68fc9220123bdcc16669da32f9e30f256fa301548ae80d15b88117c6888746
- SSDEEP 393216:JK6HiRE5bxgeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRV8:AUbxqlFiPvQ6yhpKOxk68
- TLSH T16B373322B79158A2DC749F7C04196303403F2E47DE98AFEF3BD637A949B15F089B6942
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_794de5fe581147b5438a4ed141305a60_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_794de5fe581147b5438a4ed141305a60_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- SHA256 76280fec7822ceac32786df1ec9e9ac26983d1b8212ce18a7b4b564916b67e3c
- MD5 794de5fe581147b5438a4ed141305a60
- SHA1 cb485f816bc18a895e59dc0806c7c8c063a757f6
- SHA512 4ed4fbbfa64acb2fd314dc0d9b65f07366240d4f305571c3bd8a546f763b39797d68fc9220123bdcc16669da32f9e30f256fa301548ae80d15b88117c6888746
- SSDEEP 393216:JK6HiRE5bxgeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRV8:AUbxqlFiPvQ6yhpKOxk68
- TLSH T16B373322B79158A2DC749F7C04196303403F2E47DE98AFEF3BD637A949B15F089B6942
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.