General
- Target 2026-08-03_8d9ca1d7153fae4660d9782fc79d9aaa_elex_hawkeye_luca-stealer_mespinoza_njrat_remcos
- Size 572KB
- Sample260803-v4egbathra
- SHA256 ffa23adf5a88cbd04c8d27a75af8f12345578e5dc5f5c79820eb3d3b903e8c95
- MD5 8d9ca1d7153fae4660d9782fc79d9aaa
- SHA1 fee1b98a120cb2d2cdb151cab51b27c3a2330dcd
- SHA512 657ef216c8acfdad470b25482258c831001f8673e6709479f3bde8184a89aef99d21f9f1668e01eacf5d2c2242fed59f51f3748fb674e7b87b9c12d3879477a0
- SSDEEP 12288:OGfWVAsaNfpVNsA71McTfjdGKxzlf1d1Ohi3MsgMQLkex3IzY8k/KHzhY+9P+:OGfWV/aNfpVX71McTfjdGKxzlf1dUhA3
- TLSH T1DEC47C1639858036C5B320714A6EB16619FEA8300E2F56EF67C81A3E9F744E16E35F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_8d9ca1d7153fae4660d9782fc79d9aaa_elex_hawkeye_luca-stealer_mespinoza_njrat_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_8d9ca1d7153fae4660d9782fc79d9aaa_elex_hawkeye_luca-stealer_mespinoza_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_8d9ca1d7153fae4660d9782fc79d9aaa_elex_hawkeye_luca-stealer_mespinoza_njrat_remcos
- Size 572KB
- SHA256 ffa23adf5a88cbd04c8d27a75af8f12345578e5dc5f5c79820eb3d3b903e8c95
- MD5 8d9ca1d7153fae4660d9782fc79d9aaa
- SHA1 fee1b98a120cb2d2cdb151cab51b27c3a2330dcd
- SHA512 657ef216c8acfdad470b25482258c831001f8673e6709479f3bde8184a89aef99d21f9f1668e01eacf5d2c2242fed59f51f3748fb674e7b87b9c12d3879477a0
- SSDEEP 12288:OGfWVAsaNfpVNsA71McTfjdGKxzlf1d1Ohi3MsgMQLkex3IzY8k/KHzhY+9P+:OGfWV/aNfpVX71McTfjdGKxzlf1dUhA3
- TLSH T1DEC47C1639858036C5B320714A6EB16619FEA8300E2F56EF67C81A3E9F744E16E35F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.