General
- Target 2026-07-15_59e5af706b318a7fcfbc254ef03db309_elex_hawkeye_luca-stealer_mespinoza_njrat_remcos
- Size 1.5MB
- Sample260715-n7fp8aby2m
- SHA256 e6a42ecad0cc47d1a36343e043f7972e6e0ec0725104149b0b92ef6db6744241
- MD5 59e5af706b318a7fcfbc254ef03db309
- SHA1 a79c892d0116c046f263262cd162ab5074b6f0c3
- SHA512 6424204540af519c152a26e620dc23f99d536deff444544b292a1a369ae3fbbf1f26a3f45a8b1f9bb3ca61b559fdf9e6ab3c8aa644be7718d4fc9a500baaffaa
- SSDEEP 12288:JzC6xuFqlrcIpggX1KLNLDAptNyvUgXZ32dT4ePc7N29Cxs5+j2QNbxf53nHVoTQ:Jznplgwg7LSNyBo4kx929bL3Hnx
- TLSH T1AF75F1107680D032E87606305FAACB7A953DFD540F6546DBF3D82EBE5D782D12A31BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_59e5af706b318a7fcfbc254ef03db309_elex_hawkeye_luca-stealer_mespinoza_njrat_remcos.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_59e5af706b318a7fcfbc254ef03db309_elex_hawkeye_luca-stealer_mespinoza_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_59e5af706b318a7fcfbc254ef03db309_elex_hawkeye_luca-stealer_mespinoza_njrat_remcos
- Size 1.5MB
- SHA256 e6a42ecad0cc47d1a36343e043f7972e6e0ec0725104149b0b92ef6db6744241
- MD5 59e5af706b318a7fcfbc254ef03db309
- SHA1 a79c892d0116c046f263262cd162ab5074b6f0c3
- SHA512 6424204540af519c152a26e620dc23f99d536deff444544b292a1a369ae3fbbf1f26a3f45a8b1f9bb3ca61b559fdf9e6ab3c8aa644be7718d4fc9a500baaffaa
- SSDEEP 12288:JzC6xuFqlrcIpggX1KLNLDAptNyvUgXZ32dT4ePc7N29Cxs5+j2QNbxf53nHVoTQ:Jznplgwg7LSNyBo4kx929bL3Hnx
- TLSH T1AF75F1107680D032E87606305FAACB7A953DFD540F6546DBF3D82EBE5D782D12A31BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1