Analysis
- max time kernel
148s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/08/2026, 04:27
Behavioral task
behavioral1
Sample
2026-08-22_3dad5f27454eb242854007c17b786a28_coinminer_elex_luca-stealer_mespinoza_njrat_remcos.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_3dad5f27454eb242854007c17b786a28_coinminer_elex_luca-stealer_mespinoza_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-22_3dad5f27454eb242854007c17b786a28_coinminer_elex_luca-stealer_mespinoza_njrat_remcos.exe
- Size 483KB
- Sample260822-e3cy4a1cjc
- SHA256 39758a46b079360831f25dad409659f594d657fbd63b1200c7fe19211497acdf
- MD5 3dad5f27454eb242854007c17b786a28
- SHA1 7a19b6b1b9b910b7b1d1acb53ea100c308065f1e
- SHA512 c30a687d0e338abae0dc840fb2aee918b969dd1f410d00c7122241b9b9e3c307062e75bc25c5240e2a497a38a359b351c4e953e18d1bfa7df3a6b0c9e164476c
- SSDEEP 6144:6XIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZDAXYcNz5Gv:6X7tPMK8ctGe4Dzl4h2QnuPs/ZDScv
- TLSH T1BCB49E01BAD1C072D57524300D3AF776EAB8BD2028364A7B73D61D5BFE31190B62A6B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-22_3dad5f27454eb242854007c17b786a28_coinminer_elex_luca-stealer_mespinoza_njrat_remcos.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-22_3dad5f27454eb242854007c17b786a28_coinminer_elex_luca-stealer_mespinoza_njrat_remcos.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-22_3dad5f27454eb242854007c17b786a28_coinminer_elex_luca-stealer_mespinoza_njrat_remcos.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4428