General
- Target 2026-04-15_b39e88293dc52892457d834aa524eef2_amadey_elex_luca-stealer_magniber_njrat_remcos
- Size 2.1MB
- Sample260415-sdp41sax6p
- SHA256 7cdc28dbe2b055b2619f81842f173a1518d3d06452dbaca564264333724f6cc9
- MD5 b39e88293dc52892457d834aa524eef2
- SHA1 cf0e4585d6170ff1897f93f7a61aa521b0c12677
- SHA512 cec97b7ca397b1d87f81eb3ea57e5b87d4b0a9c28e0fcb74f6c4d4ca521545380d61c9e050ed294d7408c05c2432d3fb2eea2fae8bf71e7f5cb837a106e8943e
- SSDEEP 49152:yK0eqkSR7Xgo4TiRPnLWvJ6fJ4klKXnp:yK0pR7Xn4TiRCvJ6fJ4k
- TLSH T103A5021278E08431C17375305A7EE3665A6DBC301BF1663F67CC2A3A6E74181BB2963B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_b39e88293dc52892457d834aa524eef2_amadey_elex_luca-stealer_magniber_njrat_remcos.exe
Resource
win10v2004-20260130-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_b39e88293dc52892457d834aa524eef2_amadey_elex_luca-stealer_magniber_njrat_remcos.exe
Resource
win11-20260130-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_b39e88293dc52892457d834aa524eef2_amadey_elex_luca-stealer_magniber_njrat_remcos
- Size 2.1MB
- SHA256 7cdc28dbe2b055b2619f81842f173a1518d3d06452dbaca564264333724f6cc9
- MD5 b39e88293dc52892457d834aa524eef2
- SHA1 cf0e4585d6170ff1897f93f7a61aa521b0c12677
- SHA512 cec97b7ca397b1d87f81eb3ea57e5b87d4b0a9c28e0fcb74f6c4d4ca521545380d61c9e050ed294d7408c05c2432d3fb2eea2fae8bf71e7f5cb837a106e8943e
- SSDEEP 49152:yK0eqkSR7Xgo4TiRPnLWvJ6fJ4klKXnp:yK0pR7Xn4TiRCvJ6fJ4k
- TLSH T103A5021278E08431C17375305A7EE3665A6DBC301BF1663F67CC2A3A6E74181BB2963B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1