General
- Target 2026-08-14_15cc2e84d21e98a83690df03da12062a_coinminer_elex_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader
- Size 225KB
- Sample260814-rlkntsdk7s
- SHA256 a3b7b0125ad2180424e91f8c11607a8624009ccd104a1d09dd772332fd489bd8
- MD5 15cc2e84d21e98a83690df03da12062a
- SHA1 2c5c77bb9b96439b84c463ead7db867066b10337
- SHA512 53cb1e577448dcfb45ae2b877bf0a68d216f935b5731fa126ef3a90089bd02b1671f3a142e274ff06f264b40017af0614584a530d346765c715250b7413492ea
- SSDEEP 3072:E6GEtNEXN4wCq5/v46QC2mCm/lY9Kkj3c6QQaWAk0Ag5qAWKGETBKnF58it3kzMx:hGYk4wCq5x+9T3bQQaNlTwNt3kz
- TLSH T1AB3459217C81C032C1B31934C9E5D2F06A7CBD708E658A8F63987F2F7A771926625E67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_15cc2e84d21e98a83690df03da12062a_coinminer_elex_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_15cc2e84d21e98a83690df03da12062a_coinminer_elex_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader
- Size 225KB
- SHA256 a3b7b0125ad2180424e91f8c11607a8624009ccd104a1d09dd772332fd489bd8
- MD5 15cc2e84d21e98a83690df03da12062a
- SHA1 2c5c77bb9b96439b84c463ead7db867066b10337
- SHA512 53cb1e577448dcfb45ae2b877bf0a68d216f935b5731fa126ef3a90089bd02b1671f3a142e274ff06f264b40017af0614584a530d346765c715250b7413492ea
- SSDEEP 3072:E6GEtNEXN4wCq5/v46QC2mCm/lY9Kkj3c6QQaWAk0Ag5qAWKGETBKnF58it3kzMx:hGYk4wCq5x+9T3bQQaNlTwNt3kz
- TLSH T1AB3459217C81C032C1B31934C9E5D2F06A7CBD708E658A8F63987F2F7A771926625E67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
3Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1