General
- Target 2026-08-30_f6929b7bcd78304fd218d30ecd14aa9a_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- Sample260831-3t87yazgrf
- SHA256 2e1d921a335bc3936cc1232b95fc2b9e6425d032cc01757d2937a7a9eae6716d
- MD5 f6929b7bcd78304fd218d30ecd14aa9a
- SHA1 731a7ba9c727fc3844fc17da7e3db2041ad63f94
- SHA512 d0f94313fcb258dd2a76dad0fa17e188db1e00812a6a64588c30755e1774d806ead01fd9cdc977abb83dfc5933a2459afb559f8b44e2f5c045aa47803a138531
- SSDEEP 393216:JK6HiRE5bxaxL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzAk:AUbxgxk6lFiPvQ6yhpKOxke
- TLSH T1AC373322B79258A6D8749F3C041D6303403F2E47CE98ABEF3BD637AD4A715F18976942
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_f6929b7bcd78304fd218d30ecd14aa9a_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_f6929b7bcd78304fd218d30ecd14aa9a_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 23.0MB
- SHA256 2e1d921a335bc3936cc1232b95fc2b9e6425d032cc01757d2937a7a9eae6716d
- MD5 f6929b7bcd78304fd218d30ecd14aa9a
- SHA1 731a7ba9c727fc3844fc17da7e3db2041ad63f94
- SHA512 d0f94313fcb258dd2a76dad0fa17e188db1e00812a6a64588c30755e1774d806ead01fd9cdc977abb83dfc5933a2459afb559f8b44e2f5c045aa47803a138531
- SSDEEP 393216:JK6HiRE5bxaxL3JzATzC8WfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3JzAk:AUbxgxk6lFiPvQ6yhpKOxke
- TLSH T1AC373322B79258A6D8749F3C041D6303403F2E47CE98ABEF3BD637AD4A715F18976942
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.