General
- Target 2026-04-24_1ffb66b5b1c315055037118b08cb72e1_amadey_elex_luca-stealer_manuscrypt_njrat_remcos_rhadamanthys_smoke-loader_stop
- Size 5.6MB
- Sample260424-qa36csax51
- SHA256 1b56bb2838f58cded1e1333f589008d4a81b771485b774af9740ba4c13517cbc
- MD5 1ffb66b5b1c315055037118b08cb72e1
- SHA1 06a90705e092855ee399675cc741ec255888fc72
- SHA512 bb191e20c89beb3168913fc198603d0631f529d7986fbdcf1e4e34e1a192f7acd1bddf5c1b73e15adc52f974f702dc1647df79b7a74b3490ba884acb0840a246
- SSDEEP 98304:EcRGTymaYxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kf:3GTxaPeGZF6bUpMBF1p/kf
- TLSH T1AA460216F5A48276D073C179C4E2D77AEE7134921B3086CB5385CB6D6F632E2993A332
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-24_1ffb66b5b1c315055037118b08cb72e1_amadey_elex_luca-stealer_manuscrypt_njrat_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-24_1ffb66b5b1c315055037118b08cb72e1_amadey_elex_luca-stealer_manuscrypt_njrat_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-24_1ffb66b5b1c315055037118b08cb72e1_amadey_elex_luca-stealer_manuscrypt_njrat_remcos_rhadamanthys_smoke-loader_stop
- Size 5.6MB
- SHA256 1b56bb2838f58cded1e1333f589008d4a81b771485b774af9740ba4c13517cbc
- MD5 1ffb66b5b1c315055037118b08cb72e1
- SHA1 06a90705e092855ee399675cc741ec255888fc72
- SHA512 bb191e20c89beb3168913fc198603d0631f529d7986fbdcf1e4e34e1a192f7acd1bddf5c1b73e15adc52f974f702dc1647df79b7a74b3490ba884acb0840a246
- SSDEEP 98304:EcRGTymaYxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kf:3GTxaPeGZF6bUpMBF1p/kf
- TLSH T1AA460216F5A48276D073C179C4E2D77AEE7134921B3086CB5385CB6D6F632E2993A332
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Drops file in System32 directory