General
- Target 2026-04-15_b002009dfc88e463882f8a7d6aada721_amadey_elex_luca-stealer_magniber_njrat_remcos
- Size 2.1MB
- Sample260415-r9fpsaav2m
- SHA256 f7c8346239d0be76856789e713433e101e9eaf4b69200f03e9cca64643f05462
- MD5 b002009dfc88e463882f8a7d6aada721
- SHA1 f279edebe00033b3507b9e89d46157f8b19876b0
- SHA512 5bddf9c093f81c7fcbb039e2ff422af26acf81ac7001cf8f51fb3332804c039eb734ef70f53537f5bec2dc2ad554c1fc41a585e7726aa06a1c0766d2ace47f3b
- SSDEEP 24576:HCf1xB6B9YNgqe1xTVIlz7X9zOo4PjnikEpx/nLWvJ+7SkQ/7Gb8NLEbeZ:WK0eqkSR7Xgo4TiRPnLWvJJkQ/qoLEw
- TLSH T112A5021278E18472C17375305A7ED766196DBC311BF16A3F27DC2A3BAE74080BB2563A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_b002009dfc88e463882f8a7d6aada721_amadey_elex_luca-stealer_magniber_njrat_remcos.exe
Resource
win10v2004-20260130-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_b002009dfc88e463882f8a7d6aada721_amadey_elex_luca-stealer_magniber_njrat_remcos.exe
Resource
win11-20260130-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_b002009dfc88e463882f8a7d6aada721_amadey_elex_luca-stealer_magniber_njrat_remcos
- Size 2.1MB
- SHA256 f7c8346239d0be76856789e713433e101e9eaf4b69200f03e9cca64643f05462
- MD5 b002009dfc88e463882f8a7d6aada721
- SHA1 f279edebe00033b3507b9e89d46157f8b19876b0
- SHA512 5bddf9c093f81c7fcbb039e2ff422af26acf81ac7001cf8f51fb3332804c039eb734ef70f53537f5bec2dc2ad554c1fc41a585e7726aa06a1c0766d2ace47f3b
- SSDEEP 24576:HCf1xB6B9YNgqe1xTVIlz7X9zOo4PjnikEpx/nLWvJ+7SkQ/7Gb8NLEbeZ:WK0eqkSR7Xgo4TiRPnLWvJJkQ/qoLEw
- TLSH T112A5021278E18472C17375305A7ED766196DBC311BF16A3F27DC2A3BAE74080BB2563A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1