General
- Target 2026-08-31_834b7e0d8e7fd2a5afaab41f5738fda4_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 12.0MB
- Sample260831-wfeb3sxgnc
- SHA256 5890b4db3fb65eff3e93762ab6bc34b20abd3396f08b57ffe2229404d92f8d7e
- MD5 834b7e0d8e7fd2a5afaab41f5738fda4
- SHA1 e19b6716b0fb191e9983dce89db83c86a4e95a68
- SHA512 8da525adc0055429e806803d77bfbd3896536a710642d249ff0b2095a76c7fd9842fb57107bdc4957e89b584a050094e68df7f7590ef84edbb9837283053af48
- SSDEEP 196608:JZ872k1AeAi2KOld5bxRbDMVByQyVG/uzGNVyAl3K8fCGnbP3JzATC4C8WfszNpI:JK6HiRE5bxlDMTNSG/lVrl3KExL3JzAk
- TLSH T1F8C62322B79258A6DC749F7C04196303403F2E47CE99ABEF3BD6376D4A715F089B6842
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-31_834b7e0d8e7fd2a5afaab41f5738fda4_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-31_834b7e0d8e7fd2a5afaab41f5738fda4_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 12.0MB
- SHA256 5890b4db3fb65eff3e93762ab6bc34b20abd3396f08b57ffe2229404d92f8d7e
- MD5 834b7e0d8e7fd2a5afaab41f5738fda4
- SHA1 e19b6716b0fb191e9983dce89db83c86a4e95a68
- SHA512 8da525adc0055429e806803d77bfbd3896536a710642d249ff0b2095a76c7fd9842fb57107bdc4957e89b584a050094e68df7f7590ef84edbb9837283053af48
- SSDEEP 196608:JZ872k1AeAi2KOld5bxRbDMVByQyVG/uzGNVyAl3K8fCGnbP3JzATC4C8WfszNpI:JK6HiRE5bxlDMTNSG/lVrl3KExL3JzAk
- TLSH T1F8C62322B79258A6DC749F7C04196303403F2E47CE99ABEF3BD6376D4A715F089B6842
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.