General
- Target 2026-06-26_002a1195e83e1ba81c51e77326f9c2aa_amadey_elex_luca-stealer_njrat_smoke-loader
- Size 12.2MB
- Sample260629-xcdf2scw8v
- SHA256 9ade32e499187bf27752d84d0c03eb02239e4ba554ab3d28db74576e201bbd2f
- MD5 002a1195e83e1ba81c51e77326f9c2aa
- SHA1 dc78fc668ee7c54b45b50e5488f292fadbe83de1
- SHA512 9d524af352281f3fd50d2b7d16fef4047f90aa4de57be0ef71a72af831085e3e08fb96718f5d828c848423a4fe445be969f1fcf5546eb2434ba90ab5fc523ff8
- SSDEEP 196608:EEUEUUn9B1/DlsCUooSt7QQOinwJBH5PvShuOskrrVVkjwXTS78LXyFkhk:oUXEwtQQWBHJQuOnkjQToywf
- TLSH T18BD6F120E205E019FC7B05B15AED958D68587A301F2894FB72887EFDEE796D23C35263
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_002a1195e83e1ba81c51e77326f9c2aa_amadey_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_002a1195e83e1ba81c51e77326f9c2aa_amadey_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_002a1195e83e1ba81c51e77326f9c2aa_amadey_elex_luca-stealer_njrat_smoke-loader
- Size 12.2MB
- SHA256 9ade32e499187bf27752d84d0c03eb02239e4ba554ab3d28db74576e201bbd2f
- MD5 002a1195e83e1ba81c51e77326f9c2aa
- SHA1 dc78fc668ee7c54b45b50e5488f292fadbe83de1
- SHA512 9d524af352281f3fd50d2b7d16fef4047f90aa4de57be0ef71a72af831085e3e08fb96718f5d828c848423a4fe445be969f1fcf5546eb2434ba90ab5fc523ff8
- SSDEEP 196608:EEUEUUn9B1/DlsCUooSt7QQOinwJBH5PvShuOskrrVVkjwXTS78LXyFkhk:oUXEwtQQWBHJQuOnkjQToywf
- TLSH T18BD6F120E205E019FC7B05B15AED958D68587A301F2894FB72887EFDEE796D23C35263
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.