General
- Target 2026-08-08_61586bab874d6283b1cd1ab8a2953d82_elex_hawkeye_luca-stealer_mespinoza_njrat_remcos
- Size 1.7MB
- Sample260808-py8kbafm3x
- SHA256 aab6fc721afd29279d0b659471a650f6d55d91cce744ae738c8ec268739d2304
- MD5 61586bab874d6283b1cd1ab8a2953d82
- SHA1 70962e700a8fb83e5573689f1234127fae33fc79
- SHA512 3f6c83b22444f0e43c1114aefc361ae5e260ef3b9d0a04a2430b112b1e29629e86be112d9f6ea8c84ae88baa7835c416e342f4ec620dd1ceaf94a26849525029
- SSDEEP 24576:Azn4lgwg7LJft9rAutNCirDNIo++/Foacs:GCe7LpvtNZDNV++/9cs
- TLSH T1BE85F111B280D072E87702355FB9CB6A663DFD540F6542CBB3DC2A6E5D742D12A32BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_61586bab874d6283b1cd1ab8a2953d82_elex_hawkeye_luca-stealer_mespinoza_njrat_remcos.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_61586bab874d6283b1cd1ab8a2953d82_elex_hawkeye_luca-stealer_mespinoza_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_61586bab874d6283b1cd1ab8a2953d82_elex_hawkeye_luca-stealer_mespinoza_njrat_remcos
- Size 1.7MB
- SHA256 aab6fc721afd29279d0b659471a650f6d55d91cce744ae738c8ec268739d2304
- MD5 61586bab874d6283b1cd1ab8a2953d82
- SHA1 70962e700a8fb83e5573689f1234127fae33fc79
- SHA512 3f6c83b22444f0e43c1114aefc361ae5e260ef3b9d0a04a2430b112b1e29629e86be112d9f6ea8c84ae88baa7835c416e342f4ec620dd1ceaf94a26849525029
- SSDEEP 24576:Azn4lgwg7LJft9rAutNCirDNIo++/Foacs:GCe7LpvtNZDNV++/9cs
- TLSH T1BE85F111B280D072E87702355FB9CB6A663DFD540F6542CBB3DC2A6E5D742D12A32BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1