2026-08-14_bcd4c9e90f136b63ba7393de67468d92_elex_luca-stealer_mespinoza_njrat_remcos

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-14_bcd4c9e90f136b63ba7393de67468d92_elex_luca-stealer_mespinoza_njrat_remcos
Size 303KB
Sample260814-hkshlsxtet
SHA256 eac8980aa66fce2206d05fb4f7582416ced522f4479de62e70647a3e2a429f00
MD5 bcd4c9e90f136b63ba7393de67468d92
SHA1 f3d7e582398040b119ecfbab8450ac75ea9f3298
SHA512 f16c4a4046b4ebe45463c304c2d2f8058d57f9e2c0c140fd02233438a84a1e0dd4a5c80042b5c1552d966f109cef63791845d9fc9c4e3a0b9bfd359a53ce7997
SSDEEP 3072:NvyRzQc17qVeBF/qUrm2T0HTUmuLL5wEwCg+JtsdXtJQV5r17NOi2oAg0Fubi5Q9:NvFVejqUDEZOl7xJtwtq5nAOcxYFBz
TLSH
T1E1648D107295C073E2724A364D799A67542DFC100F159BEF93E85E2EEE709C29E32B63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-14_bcd4c9e90f136b63ba7393de67468d92_elex_luca-stealer_mespinoza_njrat_remcos

File Explorer

2026-08-14_bcd4c9e90f136b63ba7393de67468d92_elex_luca-stealer_mespinoza_njrat_remcos

.exe 303KB

2026-08-14_bcd4c9e90f136b63ba7393de67468d92_elex_luca-stealer_mespinoza_njrat_remcos

IMPHASH edac0301a8c6aa367e88553c74883f05
SHA256 eac8980aa66fce2206d05fb4f7582416ced522f4479de62e70647a3e2a429f00
MD5 bcd4c9e90f136b63ba7393de67468d92
SHA1 f3d7e582398040b119ecfbab8450ac75ea9f3298
SHA512 f16c4a4046b4ebe45463c304c2d2f8058d57f9e2c0c140fd02233438a84a1e0dd4a5c80042b5c1552d966f109cef63791845d9fc9c4e3a0b9bfd359a53ce7997
SSDEEP 3072:NvyRzQc17qVeBF/qUrm2T0HTUmuLL5wEwCg+JtsdXtJQV5r17NOi2oAg0Fubi5Q9:NvFVejqUDEZOl7xJtwtq5nAOcxYFBz
TLSH
T1E1648D107295C073E2724A364D799A67542DFC100F159BEF93E85E2EEE709C29E32B63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

97235

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

Shell_NotifyIconW ShellExecuteExW

comctl32

InitCommonControlsEx

shlwapi

PathFileExistsW

kernel32

CopyFileW MultiByteToWideChar WideCharToMultiByte GetFileAttributesW GetLocalTime GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW DeleteFileW RemoveDirectoryW GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress LCMapStringW GetLocaleInfoW GetCPInfo CloseHandle SetEvent ResetEvent WaitForSingleObjectEx IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess FindNextFileW GetCurrentProcessId GetCurrentThreadId InitializeSListHead SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage FindFirstFileExW GetProcessHeap EnumSystemLocalesW GetUserDefaultLCID FindFirstFileW IsValidLocale GetFileType GetACP WriteFile GetStdHandle GetModuleFileNameW GetModuleHandleExW ExitProcess HeapReAlloc HeapFree HeapAlloc LoadLibraryExW FreeLibrary GetLastError RtlUnwind RaiseException FindClose CreateDirectoryW GetCurrentDirectoryW FlushFileBuffers WriteConsoleW QueryPerformanceCounter CreateFileW

user32

LoadIconW LoadCursorW GetClassNameW SetWindowLongW GetWindowLongW PtInRect FillRect MapWindowPoints ClientToScreen GetCursorPos SetCursor AdjustWindowRect GetWindowRect GetClientRect GetWindowTextLengthW GetWindowTextW SetWindowTextW InvalidateRect EndPaint BeginPaint ReleaseDC GetDC DestroyIcon DrawTextW TrackPopupMenu AppendMenuW DestroyMenu CreatePopupMenu GetSystemMetrics EnableWindow GetDlgCtrlID ShowWindow DestroyWindow CreateWindowExW RegisterClassExW CallWindowProcW PostQuitMessage DefWindowProcW PostMessageW SendMessageW TrackMouseEvent wsprintfW MessageBoxW DispatchMessageW TranslateMessage GetMessageW SetForegroundWindow UpdateWindow

gdi32

EnumFontFamiliesExW GetStockObject SelectObject CreateFontW SetBkColor SetBkMode SetTextColor DeleteObject CreateSolidBrush

Name

.text

Size

192KB

Virtual Size

191KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

72KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

412B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-14_bcd4c9e90f136b63ba7393de67468d92_elex_luca-stealer_mespinoza_njrat_remcos

shell32

comctl32

shlwapi

kernel32

user32

gdi32

generic