General
- Target 2026-08-27_4b5aab64afdecef7de84a589f03fcb6d_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 22.0MB
- Sample260827-wvpflazane
- SHA256 e219940f9cd4607b516d217b4b3f61de02fdf29e4075b99285277659963fa59c
- MD5 4b5aab64afdecef7de84a589f03fcb6d
- SHA1 886c407923315edb60f55fe3f41757d9eddfef15
- SHA512 479277d8723c7f71dd401d757179082656a1f036c4ea8359fec3bfd2b31da020240917987415df5d1a839331c03ba653887efa1f84d4439038deff41ae9b2b87
- SSDEEP 393216:2lFyfLPHiRE5bxMWfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfI:AUbxM6lFiPvQ6yhpKOxkN
- TLSH T14A37330AB792D865C8301B7C20286313413E1E434F55AAEF5E967B5D4E78AF1CAB3637
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_4b5aab64afdecef7de84a589f03fcb6d_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_4b5aab64afdecef7de84a589f03fcb6d_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 22.0MB
- SHA256 e219940f9cd4607b516d217b4b3f61de02fdf29e4075b99285277659963fa59c
- MD5 4b5aab64afdecef7de84a589f03fcb6d
- SHA1 886c407923315edb60f55fe3f41757d9eddfef15
- SHA512 479277d8723c7f71dd401d757179082656a1f036c4ea8359fec3bfd2b31da020240917987415df5d1a839331c03ba653887efa1f84d4439038deff41ae9b2b87
- SSDEEP 393216:2lFyfLPHiRE5bxMWfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfI:AUbxM6lFiPvQ6yhpKOxkN
- TLSH T14A37330AB792D865C8301B7C20286313413E1E434F55AAEF5E967B5D4E78AF1CAB3637
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.