General
- Target 2026-08-10_1f4a25c78e2fd7b27b604362d71bf7e5_elex_luca-stealer_mespinoza_njrat_remcos
- Size 1.8MB
- Sample260810-rd5n2av1hw
- SHA256 b9b7763ef8e72ed232b51447555ad5163e2575087edacc128c342be5be67e893
- MD5 1f4a25c78e2fd7b27b604362d71bf7e5
- SHA1 f377877be29725dfda21ba29cae12279acc69754
- SHA512 91006558da080474ac5db416b7f02aca59af7ccc0539b33eab1e5313cde8c4c30e1ea5e4538650a20aee077e2dcf22444d206fa90863de642850123a944f813b
- SSDEEP 24576:A1d0womPdsfkP3zQa/JSYM3tBZPzwFa7/wOifnz20:AFWI3zpJSY4ZPzwFI/wOifnzH
- TLSH T1AF95F1207742C431EAB209731AB99A2A153CBF600F7292DF67D8762EDDF05C15634F6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_1f4a25c78e2fd7b27b604362d71bf7e5_elex_luca-stealer_mespinoza_njrat_remcos.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_1f4a25c78e2fd7b27b604362d71bf7e5_elex_luca-stealer_mespinoza_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_1f4a25c78e2fd7b27b604362d71bf7e5_elex_luca-stealer_mespinoza_njrat_remcos
- Size 1.8MB
- SHA256 b9b7763ef8e72ed232b51447555ad5163e2575087edacc128c342be5be67e893
- MD5 1f4a25c78e2fd7b27b604362d71bf7e5
- SHA1 f377877be29725dfda21ba29cae12279acc69754
- SHA512 91006558da080474ac5db416b7f02aca59af7ccc0539b33eab1e5313cde8c4c30e1ea5e4538650a20aee077e2dcf22444d206fa90863de642850123a944f813b
- SSDEEP 24576:A1d0womPdsfkP3zQa/JSYM3tBZPzwFa7/wOifnz20:AFWI3zpJSY4ZPzwFI/wOifnzH
- TLSH T1AF95F1207742C431EAB209731AB99A2A153CBF600F7292DF67D8762EDDF05C15634F6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1