General
- Target 2026-10-28_59e0bd046936b35fe064a92a250ea592_elex_hawkeye_luca-stealer_lynx_mespinoza_njrat
- Size 1.6MB
- Sample261030-ejc5raws9q
- SHA256 521a7e8c5651b0d9842dd2a4a6f7e2c7fcc41d9b46ba2bb4251e4b05de3cd111
- MD5 59e0bd046936b35fe064a92a250ea592
- SHA1 bd1a6b54b23ff123adf4b2cbf4169f6c7b8c2c80
- SHA512 6ecca7658e5e41d501cf583f863ce75a2cceec7e1588e9de276411eb5dd5ce1ab55261af64916674796ef4a4d5f09850e6627a2f179d9baf21b687e1e1def858
- SSDEEP 24576:5TyHghrtNWDF/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:EghRYLNiXicJFFRGNzj3
- TLSH T1AE85E0207581D032E47200358FB9CB76A52DBE240B2545DBE3DC3E6E6E78BD25B35B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-28_59e0bd046936b35fe064a92a250ea592_elex_hawkeye_luca-stealer_lynx_mespinoza_njrat.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_59e0bd046936b35fe064a92a250ea592_elex_hawkeye_luca-stealer_lynx_mespinoza_njrat.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_59e0bd046936b35fe064a92a250ea592_elex_hawkeye_luca-stealer_lynx_mespinoza_njrat
- Size 1.6MB
- SHA256 521a7e8c5651b0d9842dd2a4a6f7e2c7fcc41d9b46ba2bb4251e4b05de3cd111
- MD5 59e0bd046936b35fe064a92a250ea592
- SHA1 bd1a6b54b23ff123adf4b2cbf4169f6c7b8c2c80
- SHA512 6ecca7658e5e41d501cf583f863ce75a2cceec7e1588e9de276411eb5dd5ce1ab55261af64916674796ef4a4d5f09850e6627a2f179d9baf21b687e1e1def858
- SSDEEP 24576:5TyHghrtNWDF/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:EghRYLNiXicJFFRGNzj3
- TLSH T1AE85E0207581D032E47200358FB9CB76A52DBE240B2545DBE3DC3E6E6E78BD25B35B62
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1