General
- Target 2026-08-31_b1b4d6f4b0e0a7144c155bc9f21ee093_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 21.0MB
- Sample260831-s7a7ysveqa
- SHA256 9ee2c8e5d4d02059cea633de24905e95745e8581da862b388cfd70e5dbe1a814
- MD5 b1b4d6f4b0e0a7144c155bc9f21ee093
- SHA1 dc61a27ea8d2448bff15c6687d41d472a41e8f54
- SHA512 ee6e9263d7a45148b1778871b2ada537a57af85710b95e04f71b5e267ff5500b08d3f65dd2ad2d73aab7ad7fed3a4d83c90ad5f9a8971cd5cbcffea387771db3
- SSDEEP 393216:2lFyfLPHiRE5bx8QCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCG:AUbxpPvQ6yhpKOxk6lFO
- TLSH T1DC273309B7929CA5C8305B7C20286313813E1E434F65AAEF5E967B5D4E78AF1C5B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-31_b1b4d6f4b0e0a7144c155bc9f21ee093_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-31_b1b4d6f4b0e0a7144c155bc9f21ee093_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 21.0MB
- SHA256 9ee2c8e5d4d02059cea633de24905e95745e8581da862b388cfd70e5dbe1a814
- MD5 b1b4d6f4b0e0a7144c155bc9f21ee093
- SHA1 dc61a27ea8d2448bff15c6687d41d472a41e8f54
- SHA512 ee6e9263d7a45148b1778871b2ada537a57af85710b95e04f71b5e267ff5500b08d3f65dd2ad2d73aab7ad7fed3a4d83c90ad5f9a8971cd5cbcffea387771db3
- SSDEEP 393216:2lFyfLPHiRE5bx8QCcv6QaAu5SVDMTNSG/lVrl3KExL3JzATzC8WfeIRVlFvlQCG:AUbxpPvQ6yhpKOxk6lFO
- TLSH T1DC273309B7929CA5C8305B7C20286313813E1E434F65AAEF5E967B5D4E78AF1C5B3633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.