2026-11-09_7311c87f359930f38741e8f8e0e21894_amadey_elex_luca-stealer_mespinoza_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-09_7311c87f359930f38741e8f8e0e21894_amadey_elex_luca-stealer_mespinoza_njrat
Size 1.6MB
Sample261110-tkjfgsa18p
SHA256 51137ed9218bf959e6befbd3d64adfadc390f0057fe4321ac4343b29f3985e1e
MD5 7311c87f359930f38741e8f8e0e21894
SHA1 41d84171ad7b89480b79c24c9a7b25626e8ff15c
SHA512 4950e3d394a6dd5d17cb3ebe48a470bc3fc73288b5b1f75962a16875668b9b4e8c77e4e54f3b2820c85389cd355a9025e691119eb11df36be00e306682d71cce
SSDEEP 49152:Beu2KZvttUciFCvdQR+ft983Dl3gEe8xA+:BeuxbtUci4qR+l9EDl3VxA+
TLSH
T1C475E4327593E8E1CA4D5470CF299BF412A46D7DC7F687AB61C9BEE4BB3009134A610E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-09_7311c87f359930f38741e8f8e0e21894_amadey_elex_luca-stealer_mespinoza_njrat

File Explorer

2026-11-09_7311c87f359930f38741e8f8e0e21894_amadey_elex_luca-stealer_mespinoza_njrat

.exe 1.6MB

2026-11-09_7311c87f359930f38741e8f8e0e21894_amadey_elex_luca-stealer_mespinoza_njrat

IMPHASH bcd3f96f8c25ab268161326e09a54709
SHA256 51137ed9218bf959e6befbd3d64adfadc390f0057fe4321ac4343b29f3985e1e
MD5 7311c87f359930f38741e8f8e0e21894
SHA1 41d84171ad7b89480b79c24c9a7b25626e8ff15c
SHA512 4950e3d394a6dd5d17cb3ebe48a470bc3fc73288b5b1f75962a16875668b9b4e8c77e4e54f3b2820c85389cd355a9025e691119eb11df36be00e306682d71cce
SSDEEP 49152:Beu2KZvttUciFCvdQR+ft983Dl3gEe8xA+:BeuxbtUci4qR+l9EDl3VxA+
TLSH
T1C475E4327593E8E1CA4D5470CF299BF412A46D7DC7F687AB61C9BEE4BB3009134A610E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

444112

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

chrome_pwa_launcher.exe.pdb

kernel32

AcquireSRWLockExclusive AssignProcessToJobObject CloseHandle CompareStringW CreateEventW CreateFileW CreateProcessW DecodePointer DeleteCriticalSection DeleteFileW DeleteProcThreadAttributeList EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExpandEnvironmentStringsW FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FormatMessageA FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleCP GetConsoleMode GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetDriveTypeW GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileSizeEx GetFileType GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoW GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOEMCP GetProcAddress GetProcessHeap GetProcessId GetProcessTimes GetProductInfo GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetThreadId GetThreadPriority GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetVersionExW GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc HeapSize InitOnceExecuteOnce InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeProcThreadAttributeList InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale IsWow64Process LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LocalFree MultiByteToWideChar OutputDebugStringA OutputDebugStringW QueryPerformanceCounter QueryPerformanceFrequency QueryThreadCycleTime RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive ResetEvent RtlCaptureStackBackTrace RtlUnwind SetEndOfFile SetEnvironmentVariableW SetEvent SetFilePointerEx SetHandleInformation SetLastError SetStdHandle SetThreadPriority SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryAcquireSRWLockExclusive UnhandledExceptionFilter UpdateProcThreadAttribute VirtualProtect VirtualQuery WaitForSingleObject WaitForSingleObjectEx WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

shell32

CommandLineToArgvW SHGetFolderPathW SHGetKnownFolderPath

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

advapi32

CreateProcessAsUserW EventRegister EventUnregister EventWriteTransfer RegCloseKey RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueExW

user32

AllowSetForegroundWindow

winmm

timeGetTime

dbghelp

SymCleanup SymFromAddr SymGetLineFromAddr64 SymGetSearchPathW SymInitialize SymSetOptions SymSetSearchPathW

ole32

CoTaskMemFree

Name

.text

Size

593KB

Virtual Size

593KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

196KB

Virtual Size

196KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.voltbl

Size

512B

Virtual Size

319B

Characteristics

Name

CPADinfo

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

266KB

Virtual Size

265KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

588KB

Virtual Size

592KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-09_7311c87f359930f38741e8f8e0e21894_amadey_elex_luca-stealer_mespinoza_njrat

kernel32

shell32

userenv

advapi32

user32

winmm

dbghelp

ole32

generic