General
- Target 2026-08-31_e316f3fb55fc9a9097a76a49f2e3b3f9_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- Sample260831-qs9qvsv1f1
- SHA256 0a616bc33195d745e8c03efb315cb613694154601ca2a8a80e0a33cf8828d29a
- MD5 e316f3fb55fc9a9097a76a49f2e3b3f9
- SHA1 67f2c32d2c3976f40a01b100aa42575459548a35
- SHA512 50a30efba0c966f484643a04b877d7454214c7ca74858561f0a3d8929cabf59cb0fa7f617d4ac38a9582fdd67be4dc43d3eb9c9eea47c40cc84517012f55f632
- SSDEEP 393216:2lFyfLPHiRE5bxvWfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL1:AUbxv6lFiPvQ6yhpKO1
- TLSH T1A6173309B79298B5C8301B7C20246313813E1E434F55AAEF5F967B5D4E78AF1CAB3636
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-31_e316f3fb55fc9a9097a76a49f2e3b3f9_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-31_e316f3fb55fc9a9097a76a49f2e3b3f9_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- SHA256 0a616bc33195d745e8c03efb315cb613694154601ca2a8a80e0a33cf8828d29a
- MD5 e316f3fb55fc9a9097a76a49f2e3b3f9
- SHA1 67f2c32d2c3976f40a01b100aa42575459548a35
- SHA512 50a30efba0c966f484643a04b877d7454214c7ca74858561f0a3d8929cabf59cb0fa7f617d4ac38a9582fdd67be4dc43d3eb9c9eea47c40cc84517012f55f632
- SSDEEP 393216:2lFyfLPHiRE5bxvWfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL1:AUbxv6lFiPvQ6yhpKO1
- TLSH T1A6173309B79298B5C8301B7C20246313813E1E434F55AAEF5F967B5D4E78AF1CAB3636
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.