General
- Target 2026-07-19_1a0044b36168e40b80a1c36c6f6b2460_elex_luca-stealer_mespinoza_njrat
- Size 35.0MB
- Sample260719-3fxa8aaw4z
- SHA256 b8d1da99591d2bf6dd481a1ebb86d956910d79f882b9a6e3219238aafd83ca1d
- MD5 1a0044b36168e40b80a1c36c6f6b2460
- SHA1 af4b41647bc90700141f49c7126e7288339b5e66
- SHA512 3e646c898eaee601e6fd99a0ce28465a1e1ddbf0ed7c01eb74d7e28d09877ec767277ccf9307b98b8afc048e6fbc8222d3509ac3710d94dd9d13adf017e24855
- SSDEEP 786432:OLAVVU/dJZWm58QWahyQWahIVVU/dJZWm5:OAD6vZWmaQPAQPWD6vZWm
- TLSH T1A98723103F994A63E53B3A315E1AF03C335EEB581538775F21A1670EAB782961371B2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_1a0044b36168e40b80a1c36c6f6b2460_elex_luca-stealer_mespinoza_njrat.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_1a0044b36168e40b80a1c36c6f6b2460_elex_luca-stealer_mespinoza_njrat
- Size 35.0MB
- SHA256 b8d1da99591d2bf6dd481a1ebb86d956910d79f882b9a6e3219238aafd83ca1d
- MD5 1a0044b36168e40b80a1c36c6f6b2460
- SHA1 af4b41647bc90700141f49c7126e7288339b5e66
- SHA512 3e646c898eaee601e6fd99a0ce28465a1e1ddbf0ed7c01eb74d7e28d09877ec767277ccf9307b98b8afc048e6fbc8222d3509ac3710d94dd9d13adf017e24855
- SSDEEP 786432:OLAVVU/dJZWm58QWahyQWahIVVU/dJZWm5:OAD6vZWmaQPAQPWD6vZWm
- TLSH T1A98723103F994A63E53B3A315E1AF03C335EEB581538775F21A1670EAB782961371B2E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.