General
- Target 2026-06-27_5ad52f3f58113292fca9e0f915111d40_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 961KB
- Sample260629-hvxv3shv2n
- SHA256 c18964d743581a9a1a672b5947abcd0f7e57b108d478d95018c3d5cb004b12b0
- MD5 5ad52f3f58113292fca9e0f915111d40
- SHA1 486c1df575093cdc09810f50b8fd2ed2252ee98c
- SHA512 4693f8a5f8f9bb98f10979dcb06e5197ca03e33486b3bab6ce4ccf7ec2efb21a0646f48e0367b9b32416974de961e9f83a97bf56e8fa9db59760ee9184cfdeed
- SSDEEP 24576:R3oCTWeZTfxnW9yFdNM+lu8n5bpGLIe1hdp1YdGrksf5:R3XTWsTBDNQ2iselXx
- TLSH T16D251211B4C1D0B2D036243509F4C2B5A97DBD724B2696DFA3A83B755F303D1227AAEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_5ad52f3f58113292fca9e0f915111d40_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_5ad52f3f58113292fca9e0f915111d40_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260618-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_5ad52f3f58113292fca9e0f915111d40_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 961KB
- SHA256 c18964d743581a9a1a672b5947abcd0f7e57b108d478d95018c3d5cb004b12b0
- MD5 5ad52f3f58113292fca9e0f915111d40
- SHA1 486c1df575093cdc09810f50b8fd2ed2252ee98c
- SHA512 4693f8a5f8f9bb98f10979dcb06e5197ca03e33486b3bab6ce4ccf7ec2efb21a0646f48e0367b9b32416974de961e9f83a97bf56e8fa9db59760ee9184cfdeed
- SSDEEP 24576:R3oCTWeZTfxnW9yFdNM+lu8n5bpGLIe1hdp1YdGrksf5:R3XTWsTBDNQ2iselXx
- TLSH T16D251211B4C1D0B2D036243509F4C2B5A97DBD724B2696DFA3A83B755F303D1227AAEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.