General
- Target 2026-08-27_5db54d212c304bfdff0c96dfa64f8774_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 12.0MB
- Sample260827-vdthjsyclg
- SHA256 d7be2ad7ea73e4c01ee20f88a4a22b4f74082c7f1beac4faa027c465e2ad513f
- MD5 5db54d212c304bfdff0c96dfa64f8774
- SHA1 48c8c296a22a7a0bbdbd1283dfb51b4ee5db50ae
- SHA512 7e621ad8378b41527db265c37f343305f8237c3aeb046d5d88f1570de17b1cf015097d3d217c62cf4bab606b19b38b29992321e12261fcc86df277648d9a6903
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bx2vOYDMVByQyVG/uzGNVyAl3K8fCGnbP3JzATC4C8Wv:2lFyfLPHiRE5bxiDMTNSG/lVrl3KExLF
- TLSH T198C62305B792DD65C8301B7C20686313813E0E034F55AAEF6E967B5D4E78AF1CAB3636
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_5db54d212c304bfdff0c96dfa64f8774_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_5db54d212c304bfdff0c96dfa64f8774_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 12.0MB
- SHA256 d7be2ad7ea73e4c01ee20f88a4a22b4f74082c7f1beac4faa027c465e2ad513f
- MD5 5db54d212c304bfdff0c96dfa64f8774
- SHA1 48c8c296a22a7a0bbdbd1283dfb51b4ee5db50ae
- SHA512 7e621ad8378b41527db265c37f343305f8237c3aeb046d5d88f1570de17b1cf015097d3d217c62cf4bab606b19b38b29992321e12261fcc86df277648d9a6903
- SSDEEP 196608:2lF9gfXLaAeAi2KOld5bx2vOYDMVByQyVG/uzGNVyAl3K8fCGnbP3JzATC4C8Wv:2lFyfLPHiRE5bxiDMTNSG/lVrl3KExLF
- TLSH T198C62305B792DD65C8301B7C20686313813E0E034F55AAEF6E967B5D4E78AF1CAB3636
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.