2026-11-09_2b8e40cf666a536826279fe267f83192_amadey_elex_luca-stealer_mespinoza_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-09_2b8e40cf666a536826279fe267f83192_amadey_elex_luca-stealer_mespinoza_njrat
Size 1020KB
Sample261110-313zhacf77
SHA256 09d146aeb6dc29a9adf82dcd89fa7d51baddcefde9aa496d0090f122a66cada5
MD5 2b8e40cf666a536826279fe267f83192
SHA1 b772f22706702403e0472e27343d53eb6a05c4dc
SHA512 e8889d93996896d43593fe980f94ee545921d3fd0b2cc040810c172e780557a78c4f4f08f3b0bc3b263ae636b947e35c3971941124bb9700f7db75eb34354848
SSDEEP 12288:2MZs2P8pCaaY+JL2BG0vC0dXfobR52jMEAI3Afdz3+EmNIEiRLK0CV4oHu3wEe7F:2MZs2kpChRJSBnHIqA9mNIE++0J
TLSH
T163259E60B9A0B039D411113666ACE3383639EF124F714EC7D394BEAD2E792E11E356DE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-09_2b8e40cf666a536826279fe267f83192_amadey_elex_luca-stealer_mespinoza_njrat

File Explorer

2026-11-09_2b8e40cf666a536826279fe267f83192_amadey_elex_luca-stealer_mespinoza_njrat

.exe 1020KB

2026-11-09_2b8e40cf666a536826279fe267f83192_amadey_elex_luca-stealer_mespinoza_njrat

IMPHASH 1e920d3e4df16754749cec1e7a83f792
SHA256 09d146aeb6dc29a9adf82dcd89fa7d51baddcefde9aa496d0090f122a66cada5
MD5 2b8e40cf666a536826279fe267f83192
SHA1 b772f22706702403e0472e27343d53eb6a05c4dc
SHA512 e8889d93996896d43593fe980f94ee545921d3fd0b2cc040810c172e780557a78c4f4f08f3b0bc3b263ae636b947e35c3971941124bb9700f7db75eb34354848
SSDEEP 12288:2MZs2P8pCaaY+JL2BG0vC0dXfobR52jMEAI3Afdz3+EmNIEiRLK0CV4oHu3wEe7F:2MZs2kpChRJSBnHIqA9mNIE++0J
TLSH
T163259E60B9A0B039D411113666ACE3383639EF124F714EC7D394BEAD2E792E11E356DE
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1069056

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

opera.exe.pdb

opera_elf

SignalInitializeCrashReporting

kernel32

AcquireSRWLockExclusive AssignProcessToJobObject CloseHandle CompareStringW CreateEventW CreateFileMappingW CreateFileW CreateIoCompletionPort CreateJobObjectW CreateMutexW CreateNamedPipeW CreateProcessW CreateRemoteThread CreateThread DebugBreak DecodePointer DeleteCriticalSection DeleteProcThreadAttributeList DuplicateHandle EncodePointer EnterCriticalSection EnumSystemLocalesEx EnumSystemLocalesW ExitProcess ExpandEnvironmentStringsW FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FormatMessageA FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleCP GetConsoleMode GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentProcessorNumber GetCurrentThread GetCurrentThreadId GetDateFormatW GetDriveTypeW GetEnvironmentStringsW GetEnvironmentVariableW GetFileAttributesW GetFileSizeEx GetFileType GetFullPathNameW GetHandleInformation GetLastError GetLocalTime GetLocaleInfoW GetLongPathNameW GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOEMCP GetProcAddress GetProcessHandleCount GetProcessHeaps GetProcessTimes GetProductInfo GetQueuedCompletionStatus GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetThreadId GetThreadPriority GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetUserDefaultLangID GetUserDefaultLocaleName GetVersionExW GetWindowsDirectoryW HeapAlloc HeapCreate HeapDestroy HeapFree HeapReAlloc HeapSetInformation HeapSize InitOnceExecuteOnce InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeProcThreadAttributeList InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale IsWow64Process K32QueryWorkingSetEx LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree MapViewOfFile MultiByteToWideChar OutputDebugStringA PostQueuedCompletionStatus ProcessIdToSessionId QueryDosDeviceW QueryPerformanceCounter QueryPerformanceFrequency QueryThreadCycleTime RaiseException ReadConsoleW ReadFile ReadProcessMemory RegisterWaitForSingleObject ReleaseSRWLockExclusive ResetEvent RtlCaptureStackBackTrace RtlUnwind SearchPathW SetCurrentDirectoryW SetEnvironmentVariableW SetEvent SetFilePointerEx SetHandleInformation SetInformationJobObject SetLastError SetProcessDEPPolicy SetStdHandle SetThreadAffinityMask SetThreadPriority SetUnhandledExceptionFilter SignalObjectAndWait Sleep SleepConditionVariableSRW SwitchToThread TerminateJobObject TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryAcquireSRWLockExclusive UnhandledExceptionFilter UnmapViewOfFile UnregisterWait UnregisterWaitEx UpdateProcThreadAttribute VirtualAllocEx VirtualFree VirtualFreeEx VirtualProtect VirtualProtectEx VirtualQuery VirtualQueryEx WaitForSingleObject WaitForSingleObjectEx WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile WriteProcessMemory lstrlenW

shell32

CommandLineToArgvW SHGetFolderPathW SHGetKnownFolderPath

user32

CloseDesktop CloseWindowStation CreateDesktopW CreateWindowStationW GetProcessWindowStation GetThreadDesktop GetUserObjectInformationW SetProcessDPIAware SetProcessWindowStation

winmm

timeGetTime

Name

.text

Size

614KB

Virtual Size

613KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

173KB

Virtual Size

172KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.voltbl

Size

512B

Virtual Size

243B

Characteristics

Name

.rsrc

Size

182KB

Virtual Size

182KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.zero

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-09_2b8e40cf666a536826279fe267f83192_amadey_elex_luca-stealer_mespinoza_njrat

opera_elf

kernel32

shell32

user32

winmm

generic