General
- Target 2026-07-06_81e36ed69f3f442fe9428c872f18df37_elex_luca-stealer_medusalocker_njrat_remcos
- Size 1.2MB
- Sample260706-mcap2shw8q
- SHA256 46925d183c1566023300acb813b3a8b96553672f5cc35721f76aec703e864db3
- MD5 81e36ed69f3f442fe9428c872f18df37
- SHA1 b1a97463c8b061b1c121f3c73048a91b8d418ccd
- SHA512 843adf1268207786156d04f084328ad6749a68f4e2065513412110776e4e80b4961dcb247c8b6ffc5e550197f3a249eafc116ec23fe33979afff92bc2d51d8e2
- SSDEEP 24576:veROuWakNQVVEPj4qaOQg743TvRk6NwG:02/cEPEVOQ9Dv66mG
- TLSH T14C45DF203AE6C039F5B357706EBEDAAA042DBE644F3584DB7BD4492D28705C25B71B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_81e36ed69f3f442fe9428c872f18df37_elex_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_81e36ed69f3f442fe9428c872f18df37_elex_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_81e36ed69f3f442fe9428c872f18df37_elex_luca-stealer_medusalocker_njrat_remcos
- Size 1.2MB
- SHA256 46925d183c1566023300acb813b3a8b96553672f5cc35721f76aec703e864db3
- MD5 81e36ed69f3f442fe9428c872f18df37
- SHA1 b1a97463c8b061b1c121f3c73048a91b8d418ccd
- SHA512 843adf1268207786156d04f084328ad6749a68f4e2065513412110776e4e80b4961dcb247c8b6ffc5e550197f3a249eafc116ec23fe33979afff92bc2d51d8e2
- SSDEEP 24576:veROuWakNQVVEPj4qaOQg743TvRk6NwG:02/cEPEVOQ9Dv66mG
- TLSH T14C45DF203AE6C039F5B357706EBEDAAA042DBE644F3584DB7BD4492D28705C25B71B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.