General
- Target 2026-06-25_aa54877e0dba669015657da78ba3f432_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 787KB
- Sample260629-za94caex9z
- SHA256 39fb01b9f7ad1150298c5c9bfaf95d278b98feb778637c78662d5e6631ea055e
- MD5 aa54877e0dba669015657da78ba3f432
- SHA1 b4691ec5b0a6d7a557220a4768efc443dcf0a84a
- SHA512 8fdc874dd05f52ac9221003f56d8f5b91560ca423e4d32fb96f403590cb073fd8a90ee07543181a19dac5f370e31d503cbb39c76497a991a33d0e8303a9f6ebe
- SSDEEP 12288:nr5A62A+xy4rvx+aF32hsGyIzeDT/n16srLLpq91TRdA0DtkVcBAqiW0FrpFXf8x:nr5r+I4rvxLUTULrxqnd9kOBx0F9qq
- TLSH T1F8051211B0E2C4B2D5B7063509F1AAB05AADB8324E209F7F27D5073E8F785929539E73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-25_aa54877e0dba669015657da78ba3f432_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_aa54877e0dba669015657da78ba3f432_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_aa54877e0dba669015657da78ba3f432_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 787KB
- SHA256 39fb01b9f7ad1150298c5c9bfaf95d278b98feb778637c78662d5e6631ea055e
- MD5 aa54877e0dba669015657da78ba3f432
- SHA1 b4691ec5b0a6d7a557220a4768efc443dcf0a84a
- SHA512 8fdc874dd05f52ac9221003f56d8f5b91560ca423e4d32fb96f403590cb073fd8a90ee07543181a19dac5f370e31d503cbb39c76497a991a33d0e8303a9f6ebe
- SSDEEP 12288:nr5A62A+xy4rvx+aF32hsGyIzeDT/n16srLLpq91TRdA0DtkVcBAqiW0FrpFXf8x:nr5r+I4rvxLUTULrxqnd9kOBx0F9qq
- TLSH T1F8051211B0E2C4B2D5B7063509F1AAB05AADB8324E209F7F27D5073E8F785929539E73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.