General
- Target 2026-08-27_70c9c830e187bf247b4e4f99f4b31227_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- Sample260827-sl8akaaa95
- SHA256 f335d42ec66855890f85a7dc990a051e75bd3240047c95907a53bc5b436394cc
- MD5 70c9c830e187bf247b4e4f99f4b31227
- SHA1 53e4f55adb64a4790761ecf025dbe015be342ab1
- SHA512 259a26dc187f9bd9f6a1e0c9a4f79b3c6932f4a7d4843b5362f311db17d0c886e43f84b010ce4bb6649bc19c634b7f29a0d45d1b366413f3af4c42fe9878083b
- SSDEEP 196608:JZ872k1AeAi2KOld5bxRIszNpiRVxK65DzLlQCcHst:JK6HiRE5bxyeIRVlFvlQCc0
- TLSH T143B62322B39258A2D8B4AF7C04196303413F2E87DE98AFDF3BD63B6949715F08977452
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_70c9c830e187bf247b4e4f99f4b31227_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_70c9c830e187bf247b4e4f99f4b31227_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 10.0MB
- SHA256 f335d42ec66855890f85a7dc990a051e75bd3240047c95907a53bc5b436394cc
- MD5 70c9c830e187bf247b4e4f99f4b31227
- SHA1 53e4f55adb64a4790761ecf025dbe015be342ab1
- SHA512 259a26dc187f9bd9f6a1e0c9a4f79b3c6932f4a7d4843b5362f311db17d0c886e43f84b010ce4bb6649bc19c634b7f29a0d45d1b366413f3af4c42fe9878083b
- SSDEEP 196608:JZ872k1AeAi2KOld5bxRIszNpiRVxK65DzLlQCcHst:JK6HiRE5bxyeIRVlFvlQCc0
- TLSH T143B62322B39258A2D8B4AF7C04196303413F2E87DE98AFDF3BD63B6949715F08977452
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.