General
- Target 2026-08-27_6926a649e293d9877982f06afcfc0285_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- Sample260827-tb5mcsar9w
- SHA256 b741f92582ed6532e0e2a8043fc95d91d19f829b5bd9a5b09f9b0c7f89d749e1
- MD5 6926a649e293d9877982f06afcfc0285
- SHA1 97d1ab681533f89061ec08b41ae92863a986cb9b
- SHA512 8208abf490ff5e78500db9937d13ca7696091f2006e94750bb087ef8d249d7736dabde40dd37a986f7f56a2a5b1752b62cb7f80c39c53a772e8d03e6c6fa65cf
- SSDEEP 393216:2lFyfLPHiRE5bxxFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvN:AUbxxFiPvQ6yhpKOxk6lFl
- TLSH T128373305B7A298A5C8301B7C10286313813E1E434F69ABEF5E967B5D4D78AF1C6B3637
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_6926a649e293d9877982f06afcfc0285_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_6926a649e293d9877982f06afcfc0285_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- SHA256 b741f92582ed6532e0e2a8043fc95d91d19f829b5bd9a5b09f9b0c7f89d749e1
- MD5 6926a649e293d9877982f06afcfc0285
- SHA1 97d1ab681533f89061ec08b41ae92863a986cb9b
- SHA512 8208abf490ff5e78500db9937d13ca7696091f2006e94750bb087ef8d249d7736dabde40dd37a986f7f56a2a5b1752b62cb7f80c39c53a772e8d03e6c6fa65cf
- SSDEEP 393216:2lFyfLPHiRE5bxxFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvN:AUbxxFiPvQ6yhpKOxk6lFl
- TLSH T128373305B7A298A5C8301B7C10286313813E1E434F69ABEF5E967B5D4D78AF1C6B3637
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.