General
- Target 2026-07-28_51a534cab423031906c6fa1e03e1c9d8_elex_luca-stealer_mespinoza_njrat_remcos_smoke-loader
- Size 52.1MB
- Sample260728-g6ggssff56
- SHA256 4ba9e444e0c37aa7cea3e9c68886c49d0bd92d9a7b4da8b38ba4c520ea87e7e5
- MD5 51a534cab423031906c6fa1e03e1c9d8
- SHA1 150947b5167ce57694b827f2632813cc8cc11af2
- SHA512 37e7d586b2ae0259e8119128f35096a474686680ab2a542c5e1876cbcedef3f50b32a4399240319c816ac663f0ba86505fe2bf45444f86ec5ba9e78e40a4599c
- SSDEEP 1572864:SeAEy60ld0LnuZESZUVfSTdxzB9nWsm2LrOTe051QiknC:K9rldwnCZUSdxfi2fOH1Q1C
- TLSH T108C7339BB4A0581DE9A3373D55B11B301E381AA6BB57E5EB12016B0D8EF3CE6C713712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_51a534cab423031906c6fa1e03e1c9d8_elex_luca-stealer_mespinoza_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_51a534cab423031906c6fa1e03e1c9d8_elex_luca-stealer_mespinoza_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_51a534cab423031906c6fa1e03e1c9d8_elex_luca-stealer_mespinoza_njrat_remcos_smoke-loader
- Size 52.1MB
- SHA256 4ba9e444e0c37aa7cea3e9c68886c49d0bd92d9a7b4da8b38ba4c520ea87e7e5
- MD5 51a534cab423031906c6fa1e03e1c9d8
- SHA1 150947b5167ce57694b827f2632813cc8cc11af2
- SHA512 37e7d586b2ae0259e8119128f35096a474686680ab2a542c5e1876cbcedef3f50b32a4399240319c816ac663f0ba86505fe2bf45444f86ec5ba9e78e40a4599c
- SSDEEP 1572864:SeAEy60ld0LnuZESZUVfSTdxzB9nWsm2LrOTe051QiknC:K9rldwnCZUSdxfi2fOH1Q1C
- TLSH T108C7339BB4A0581DE9A3373D55B11B301E381AA6BB57E5EB12016B0D8EF3CE6C713712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)