General

  • Target
    2026-10-14_42009e47f04c6ca8e5f614f38d0f44c6_elex_luca-stealer_mespinoza_njrat
  • Size 18.4MB
  • Sample261014-2mrtmscs4w
  • SHA256 5a9a4d4dbeb4dc27f29c0318c22e9a8797e82ee899932a30ecaa1729e539f114
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 2026-10-14_42009e47f04c6ca8e5f614f38d0f44c6_elex_luca-stealer_mespinoza_njrat
    .exe 18.4MB

2026-10-14_42009e47f04c6ca8e5f614f38d0f44c6_elex_luca-stealer_mespinoza_njrat

  • IMPHASH d2cba980752931c2071001f4bfd98d08
  • SHA256 5a9a4d4dbeb4dc27f29c0318c22e9a8797e82ee899932a30ecaa1729e539f114
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
39:fd:8c:35:2b:58:85:09:c5:31:ee:5b:97:f4:65:1b:e1:a2:98:34:1f:ee:72:c3:03:00:fc:12:b4:75:8d:a7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=200204019,CN=VS REVO GROUP OOD,O=VS REVO GROUP OOD,L=Ruse,C=BG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024247
Chains

Jan 1, 0001

PE Signature issue

Digest
69:f6:8d:3b:c5:a4:38:b1:1d:81:b3:55:52:08:11:ad:6a:f4:e6:0d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=200204019,CN=VS REVO GROUP OOD,O=VS REVO GROUP OOD,L=Ruse,C=BG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024247
Chains

Jan 1, 0001

Minor OS version
0
Major OS version
6
Entry point
2851761
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Work\VSRevo\Windows\Projects\VSProjectFree\Release Portable\RevoUnin.pdb