General
- Target 2026-06-26_fd497bcdad137cb594e8ca30f407f825_amadey_elex_luca-stealer_njrat_smoke-loader
- Size 12.2MB
- Sample260629-mwkpcsds9n
- SHA256 9c68e20e15a8129273c5db7446a3240c2e84d71820fc2aa00d4f03fd5ba72523
- MD5 fd497bcdad137cb594e8ca30f407f825
- SHA1 d7096d9e7b2f7022574bd82548967e3d8d6c3870
- SHA512 6ae340690bd56f80f8dfb5ea3f70534e9ae852b43767b2200402cc8e1f14561c6fe9a37fd6bf5844be0ba0da1a856e9c1eec80df982fe2cc150361d74b9e2e2a
- SSDEEP 196608:objPpcWIixc+gzvpQplZU+0eYLub2v/cfk7BLLqoz3HnZrXyFkh5:CjM+g2h09cm/cf01LqoznZrwi
- TLSH T1BED6E120E205E01AFC7B05759DED958C68587A300F2894FB72887EFEDA796D17C36263
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_fd497bcdad137cb594e8ca30f407f825_amadey_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_fd497bcdad137cb594e8ca30f407f825_amadey_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260618-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_fd497bcdad137cb594e8ca30f407f825_amadey_elex_luca-stealer_njrat_smoke-loader
- Size 12.2MB
- SHA256 9c68e20e15a8129273c5db7446a3240c2e84d71820fc2aa00d4f03fd5ba72523
- MD5 fd497bcdad137cb594e8ca30f407f825
- SHA1 d7096d9e7b2f7022574bd82548967e3d8d6c3870
- SHA512 6ae340690bd56f80f8dfb5ea3f70534e9ae852b43767b2200402cc8e1f14561c6fe9a37fd6bf5844be0ba0da1a856e9c1eec80df982fe2cc150361d74b9e2e2a
- SSDEEP 196608:objPpcWIixc+gzvpQplZU+0eYLub2v/cfk7BLLqoz3HnZrXyFkh5:CjM+g2h09cm/cf01LqoznZrwi
- TLSH T1BED6E120E205E01AFC7B05759DED958C68587A300F2894FB72887EFEDA796D17C36263
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.