2026-08-03_8d9ca1d7153fae4660d9782fc79d9aaa_elex_hawkeye_luca-stealer_mespinoza_njrat_remcos

General

Target
2026-08-03_8d9ca1d7153fae4660d9782fc79d9aaa_elex_hawkeye_luca-stealer_mespinoza_njrat_remcos
Size 572KB
Sample260803-v4egbathra
SHA256 ffa23adf5a88cbd04c8d27a75af8f12345578e5dc5f5c79820eb3d3b903e8c95
MD5 8d9ca1d7153fae4660d9782fc79d9aaa
SHA1 fee1b98a120cb2d2cdb151cab51b27c3a2330dcd
SHA512 657ef216c8acfdad470b25482258c831001f8673e6709479f3bde8184a89aef99d21f9f1668e01eacf5d2c2242fed59f51f3748fb674e7b87b9c12d3879477a0
SSDEEP 12288:OGfWVAsaNfpVNsA71McTfjdGKxzlf1d1Ohi3MsgMQLkex3IzY8k/KHzhY+9P+:OGfWV/aNfpVX71McTfjdGKxzlf1dUhA3
TLSH
T1DEC47C1639858036C5B320714A6EB16619FEA8300E2F56EF67C81A3E9F744E16E35F37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_8d9ca1d7153fae4660d9782fc79d9aaa_elex_hawkeye_luca-stealer_mespinoza_njrat_remcos

File Explorer

2026-08-03_8d9ca1d7153fae4660d9782fc79d9aaa_elex_hawkeye_luca-stealer_mespinoza_njrat_remcos

.exe 572KB

2026-08-03_8d9ca1d7153fae4660d9782fc79d9aaa_elex_hawkeye_luca-stealer_mespinoza_njrat_remcos

SHA256 ffa23adf5a88cbd04c8d27a75af8f12345578e5dc5f5c79820eb3d3b903e8c95
MD5 8d9ca1d7153fae4660d9782fc79d9aaa
SHA1 fee1b98a120cb2d2cdb151cab51b27c3a2330dcd
SHA512 657ef216c8acfdad470b25482258c831001f8673e6709479f3bde8184a89aef99d21f9f1668e01eacf5d2c2242fed59f51f3748fb674e7b87b9c12d3879477a0
SSDEEP 12288:OGfWVAsaNfpVNsA71McTfjdGKxzlf1d1Ohi3MsgMQLkex3IzY8k/KHzhY+9P+:OGfWV/aNfpVX71McTfjdGKxzlf1dUhA3
TLSH
T1DEC47C1639858036C5B320714A6EB16619FEA8300E2F56EF67C81A3E9F744E16E35F37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

173411

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

455KB

Virtual Size

454KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

83KB

Virtual Size

83KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_8d9ca1d7153fae4660d9782fc79d9aaa_elex_hawkeye_luca-stealer_mespinoza_njrat_remcos

generic