General
- Target 2026-07-20_1d450e24ff55fe7509ac21f5285b150e_elex_luca-stealer_mespinoza_njrat_remcos
- Size 1.5MB
- Sample260720-yf49lsdv7q
- SHA256 b9453e2f9912f132a62c5323a2e1160ab038e2ea84e14135dde3fdd247de4fb1
- MD5 1d450e24ff55fe7509ac21f5285b150e
- SHA1 76b9fb884599566d52ea9e7c96a5795188d0b17d
- SHA512 a15991d03915b134f3605e99b205b7bfc0b820a4deac47bc962b4f76ca242f0bcd3b5577f66ad5f8349ba0479be94caf4107eec69cc41330215a28d713097719
- SSDEEP 24576:zjjx6X/laMicEEhBbcIZgXOkDXhXTA0ImCSERIk1k7c+vDqGJAAg:d6X/nEIz+XTAhmCXIk8x77AA
- TLSH T12A759D61F6E2C0F1E9D320B2DDAA7AF648A46E05CB244CDF5EC03D5539701D2363AA5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_1d450e24ff55fe7509ac21f5285b150e_elex_luca-stealer_mespinoza_njrat_remcos.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_1d450e24ff55fe7509ac21f5285b150e_elex_luca-stealer_mespinoza_njrat_remcos
- Size 1.5MB
- SHA256 b9453e2f9912f132a62c5323a2e1160ab038e2ea84e14135dde3fdd247de4fb1
- MD5 1d450e24ff55fe7509ac21f5285b150e
- SHA1 76b9fb884599566d52ea9e7c96a5795188d0b17d
- SHA512 a15991d03915b134f3605e99b205b7bfc0b820a4deac47bc962b4f76ca242f0bcd3b5577f66ad5f8349ba0479be94caf4107eec69cc41330215a28d713097719
- SSDEEP 24576:zjjx6X/laMicEEhBbcIZgXOkDXhXTA0ImCSERIk1k7c+vDqGJAAg:d6X/nEIz+XTAhmCXIk8x77AA
- TLSH T12A759D61F6E2C0F1E9D320B2DDAA7AF648A46E05CB244CDF5EC03D5539701D2363AA5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1