General
- Target 2026-08-27_55fc13b593cc3cf4cc439d550b91bae6_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 12.0MB
- Sample260827-v2b86scj7y
- SHA256 533398bca5a66256405a1c178835e0b3581afb2d7820378b29f3d7ef510e36c4
- MD5 55fc13b593cc3cf4cc439d550b91bae6
- SHA1 95ea6de29349868a8ee4e1044edfe78f6e1cae2c
- SHA512 e149bc46c17af023af9b6be7c78b9853dca4037d736b408548eb273f110c34f4d2f8a6f31712189a23bb2b941ccec81dd6937b241023809179fc392f6b88caf4
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxBByQyVG/uzGNVyAl3K8fCGnbP3JzATC4C8WfszNpiRv:2lFyfLPHiRE5bxHNSG/lVrl3KExL3JzL
- TLSH T1C5C62309B792DD65C8302B7C20686317813E1D034F65AAEF6E927B5D4E78AF1C9B3532
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_55fc13b593cc3cf4cc439d550b91bae6_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_55fc13b593cc3cf4cc439d550b91bae6_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 12.0MB
- SHA256 533398bca5a66256405a1c178835e0b3581afb2d7820378b29f3d7ef510e36c4
- MD5 55fc13b593cc3cf4cc439d550b91bae6
- SHA1 95ea6de29349868a8ee4e1044edfe78f6e1cae2c
- SHA512 e149bc46c17af023af9b6be7c78b9853dca4037d736b408548eb273f110c34f4d2f8a6f31712189a23bb2b941ccec81dd6937b241023809179fc392f6b88caf4
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bxBByQyVG/uzGNVyAl3K8fCGnbP3JzATC4C8WfszNpiRv:2lFyfLPHiRE5bxHNSG/lVrl3KExL3JzL
- TLSH T1C5C62309B792DD65C8302B7C20686317813E1D034F65AAEF6E927B5D4E78AF1C9B3532
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.