General

  • Target
    2026-11-05_b6f41a38ecf07c1bedc765a9e9f3ff39_elex_floxif_luca-stealer_mespinoza_njrat
  • Size 8.1MB
  • Sample261105-b54caahs9k
  • SHA256 4a3d1d389aa54222b76727dfd2a97c10c40cc66b1f98c085c1802ef08489334b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-11-05_b6f41a38ecf07c1bedc765a9e9f3ff39_elex_floxif_luca-stealer_mespinoza_njrat
    .exe 8.1MB

2026-11-05_b6f41a38ecf07c1bedc765a9e9f3ff39_elex_floxif_luca-stealer_mespinoza_njrat

  • IMPHASH 9e4f2e797fcc36d9babf0f1ea2732200
  • SHA256 4a3d1d389aa54222b76727dfd2a97c10c40cc66b1f98c085c1802ef08489334b
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
f9:cc:e3:d9:37:80:1e:a3:ed:3c:30:22:08:ba:37:d4:ab:9b:bc:c2:9e:dd:1a:13:ed:b2:36:a0:b5:2f:9f:9e
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=200204019,CN=VS Revo Group Ltd.,O=VS Revo Group Ltd.,L=Ruse,C=BG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024247

PE Signature issue

Digest
2f:09:fd:32:cd:6a:a9:58:f2:0d:09:a5:33:3d:21:09:87:ba:dc:17
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=200204019,CN=VS Revo Group Ltd.,O=VS Revo Group Ltd.,L=Ruse,C=BG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024247
Minor OS version
0
Major OS version
6
Entry point
1379680
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\work2\RevoAppBar4\Release Portable\RevoAppBar.pdb