General
- Target 2026-08-31_6a32486fd06145dfbde8a41b450cfa98_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- Sample260831-xt1mxa1vfx
- SHA256 1619c4a747ffdd6e6e706d67a6938b8cee1fabf39e996793b87f82ba8045b109
- MD5 6a32486fd06145dfbde8a41b450cfa98
- SHA1 6bd3b97f2aa733f9a08c23be686c113b4b0d9c4b
- SHA512 c69e640e82c37c9b0995e47d1eae99c6bec77366d5a79d0d042a19813107b7859cc72ca2376d5da7944f9137ac86ac0f21b945b9312e354c31e9612d4bf2f4a0
- SSDEEP 393216:2lFyfLPHiRE5bxGWfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3Js:AUbxG6lFiPvQ6yhpKOy
- TLSH T192173306B7A298B5C8305B7C10246313813E1E434F55AAEF5F967B5D4E78AF1CAB3632
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-31_6a32486fd06145dfbde8a41b450cfa98_darkgate_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-31_6a32486fd06145dfbde8a41b450cfa98_darkgate_elex_luca-stealer_mespinoza_njrat
- Size 19.0MB
- SHA256 1619c4a747ffdd6e6e706d67a6938b8cee1fabf39e996793b87f82ba8045b109
- MD5 6a32486fd06145dfbde8a41b450cfa98
- SHA1 6bd3b97f2aa733f9a08c23be686c113b4b0d9c4b
- SHA512 c69e640e82c37c9b0995e47d1eae99c6bec77366d5a79d0d042a19813107b7859cc72ca2376d5da7944f9137ac86ac0f21b945b9312e354c31e9612d4bf2f4a0
- SSDEEP 393216:2lFyfLPHiRE5bxGWfeIRVlFvlQCcv6QaAu5SVDMTNSG/lVrl3KExL3Js:AUbxG6lFiPvQ6yhpKOy
- TLSH T192173306B7A298B5C8305B7C10246313813E1E434F55AAEF5F967B5D4E78AF1CAB3632
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.