General

  • Target
    2026-05-04_d2340b7df01aae16a46f653f18c40cc0_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
  • Size 786KB
  • Sample260504-phkhjsaz4x
  • SHA256 1c8d9eec97b3ed16d1c29d486f049146be9c4df91cda1a91bdfb7aebfc055025
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-05-04_d2340b7df01aae16a46f653f18c40cc0_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
    • Size 786KB
    • SHA256 1c8d9eec97b3ed16d1c29d486f049146be9c4df91cda1a91bdfb7aebfc055025
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks