2026-07-30_960b117b77a1587750ba410290877448_elex_luca-stealer_mespinoza_njrat_remcos

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-30_960b117b77a1587750ba410290877448_elex_luca-stealer_mespinoza_njrat_remcos
Size 305KB
Sample260730-dpcwha1zdv
SHA256 26b433901ec60b74a641827b9726b3d2bc80561d4921260540bf8236dabbd75a
MD5 960b117b77a1587750ba410290877448
SHA1 352647fada70e803a082a49979a5a88440e6caaa
SHA512 7a770dc0ce8214d7af2adf410c7148d5d0306ddff4bc551039b8fe61a7762f33614cc1800b76066bb5f5d1db2611a4b1554e44f4099e2e833a65e55582a1b609
SSDEEP 3072:a+9u/9OrxeL5QXXV/eUkAOlg0mHBod+RHy8yGFlyKf6eHorAg0FubcpH7sfTUy1g:z9BXlW8OHwocHtyC8AOAIfYSpkDJ
TLSH
T110647D11B2D6C4B2E273593209799766493DBD600F3487EF53D85E2EDE349C1AA32B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_960b117b77a1587750ba410290877448_elex_luca-stealer_mespinoza_njrat_remcos

File Explorer

2026-07-30_960b117b77a1587750ba410290877448_elex_luca-stealer_mespinoza_njrat_remcos

.exe 305KB

2026-07-30_960b117b77a1587750ba410290877448_elex_luca-stealer_mespinoza_njrat_remcos

IMPHASH 1bb9a092d30366bbac53d7e9b9f0766f
SHA256 26b433901ec60b74a641827b9726b3d2bc80561d4921260540bf8236dabbd75a
MD5 960b117b77a1587750ba410290877448
SHA1 352647fada70e803a082a49979a5a88440e6caaa
SHA512 7a770dc0ce8214d7af2adf410c7148d5d0306ddff4bc551039b8fe61a7762f33614cc1800b76066bb5f5d1db2611a4b1554e44f4099e2e833a65e55582a1b609
SSDEEP 3072:a+9u/9OrxeL5QXXV/eUkAOlg0mHBod+RHy8yGFlyKf6eHorAg0FubcpH7sfTUy1g:z9BXlW8OHwocHtyC8AOAIfYSpkDJ
TLSH
T110647D11B2D6C4B2E273593209799766493DBD600F3487EF53D85E2EDE349C1AA32B23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

91827

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

Shell_NotifyIconW SHFileOperationW ShellExecuteExW

comctl32

InitCommonControlsEx

ws2_32

gethostname WSAAddressToStringW WSACleanup WSAStartup freeaddrinfo getaddrinfo

shlwapi

PathFileExistsW

kernel32

SetStdHandle GetCurrentDirectoryW GetDiskFreeSpaceExW GetFileAttributesW OutputDebugStringA OutputDebugStringW FindClose FindFirstFileW FindNextFileW CopyFileW MultiByteToWideChar WideCharToMultiByte GetCurrentProcessId GetLocalTime GetTickCount GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW SetErrorMode DeleteFileW CloseHandle SetFileAttributesW GetLastError CreateProcessW GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress HeapSize GetLocaleInfoW GetCPInfo SetEvent ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId InitializeSListHead FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage FindFirstFileExW GetProcessHeap EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetConsoleCP GetFileType GetACP WriteFile GetStdHandle GetModuleFileNameW GetModuleHandleExW ExitProcess HeapReAlloc HeapFree HeapAlloc LoadLibraryExW FreeLibrary RtlUnwind RaiseException GetConsoleMode SetFilePointerEx FlushFileBuffers WriteConsoleW LCMapStringW CreateFileW

user32

LoadCursorW GetClassNameW SetWindowLongW GetWindowLongW DestroyIcon FillRect MapWindowPoints ClientToScreen GetCursorPos SetCursor PtInRect LoadIconW wsprintfW AdjustWindowRect GetWindowRect GetClientRect GetWindowTextLengthW GetWindowTextW SetWindowTextW InvalidateRect EndPaint BeginPaint ReleaseDC GetDC SetForegroundWindow UpdateWindow DrawTextW TrackPopupMenu AppendMenuW DestroyMenu CreatePopupMenu EnableWindow ShowWindow DestroyWindow CreateWindowExW RegisterClassExW CallWindowProcW PostQuitMessage DefWindowProcW PostMessageW SendMessageW TrackMouseEvent MessageBoxW DispatchMessageW TranslateMessage GetMessageW GetSystemMetrics GetDlgCtrlID

gdi32

EnumFontFamiliesExW DeleteObject CreateSolidBrush CreateFontW SetBkColor SetBkMode SetTextColor GetStockObject SelectObject

ole32

CoInitializeEx CoUninitialize

Name

.text

Size

186KB

Virtual Size

186KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

72KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

412B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_960b117b77a1587750ba410290877448_elex_luca-stealer_mespinoza_njrat_remcos

shell32

comctl32

ws2_32

shlwapi

kernel32

user32

gdi32

ole32

generic