General
- Target 2026-07-01_d8daa7dc0c96624cbe7031a0cf6bbefa_coinminer_elex_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader
- Size 225KB
- Sample260701-jam1tagz3j
- SHA256 911ed549949a25f44edca52cec55e3257387396422d5be6f3081daf3dcb5225c
- MD5 d8daa7dc0c96624cbe7031a0cf6bbefa
- SHA1 f48378962ebd1d33f8cd38e176087a937904f250
- SHA512 c08428ac5b1ea627064478d97046007ecc7735f8f77c90b1a63865b9a2c340088eac0c77b9f95646f0f8740df2df041661ccdfc80ff4b2fe6a8524918045fe39
- SSDEEP 3072:E6GEtNEXN4wCq5/v46QC2mCm/lY9Kkj3c6QQaWAk0Ag5qAWKGETBKnF58it3kzMx:hGYk4wCq5x+9T3bQQaNlTwNt3kz
- TLSH T1FE3459217C81C032C1B31934C9E5D2F06A7CBD708E658A8F63987F2F7A771926625E67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_d8daa7dc0c96624cbe7031a0cf6bbefa_coinminer_elex_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_d8daa7dc0c96624cbe7031a0cf6bbefa_coinminer_elex_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_d8daa7dc0c96624cbe7031a0cf6bbefa_coinminer_elex_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader
- Size 225KB
- SHA256 911ed549949a25f44edca52cec55e3257387396422d5be6f3081daf3dcb5225c
- MD5 d8daa7dc0c96624cbe7031a0cf6bbefa
- SHA1 f48378962ebd1d33f8cd38e176087a937904f250
- SHA512 c08428ac5b1ea627064478d97046007ecc7735f8f77c90b1a63865b9a2c340088eac0c77b9f95646f0f8740df2df041661ccdfc80ff4b2fe6a8524918045fe39
- SSDEEP 3072:E6GEtNEXN4wCq5/v46QC2mCm/lY9Kkj3c6QQaWAk0Ag5qAWKGETBKnF58it3kzMx:hGYk4wCq5x+9T3bQQaNlTwNt3kz
- TLSH T1FE3459217C81C032C1B31934C9E5D2F06A7CBD708E658A8F63987F2F7A771926625E67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Downloads MZ/PE file
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.