General
- Target 2026-06-29_7bbba9b5220cfacb73a22cfbab60d73f_amadey_elex_lockergoga_luca-stealer_njrat_redline-stealer_smoke-loader_swisyn
- Size 2.4MB
- Sample260630-jd68vsat2n
- SHA256 9bcdf64ad7b36346515e8242fcdc108383f3a3fe8312fe8effaf7b97c9ae8bfa
- MD5 7bbba9b5220cfacb73a22cfbab60d73f
- SHA1 728f8b4f86b34c6fa81495be4b7dd7fcaac2cf43
- SHA512 80139d8ecbf59c8e3f5c9b85eb0dfda51e667c7629c38ced269fb1345eb913b9295383506841ac48b44c27f5486a88352980adab9a5f13a22c0c014e3c968f1c
- SSDEEP 49152:thxw68tZnReHVbsDCb4JGqi/H9mLpQRwoXV:m68iYDCb4AqaHcI
- TLSH T1A7C57D317E46C53AE98600F54A6CBAEF425D9AA40F7145C792CC17EEE9381E32F31693
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_7bbba9b5220cfacb73a22cfbab60d73f_amadey_elex_lockergoga_luca-stealer_njrat_redline-stealer_smoke-loader_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_7bbba9b5220cfacb73a22cfbab60d73f_amadey_elex_lockergoga_luca-stealer_njrat_redline-stealer_smoke-loader_swisyn.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_7bbba9b5220cfacb73a22cfbab60d73f_amadey_elex_lockergoga_luca-stealer_njrat_redline-stealer_smoke-loader_swisyn
- Size 2.4MB
- SHA256 9bcdf64ad7b36346515e8242fcdc108383f3a3fe8312fe8effaf7b97c9ae8bfa
- MD5 7bbba9b5220cfacb73a22cfbab60d73f
- SHA1 728f8b4f86b34c6fa81495be4b7dd7fcaac2cf43
- SHA512 80139d8ecbf59c8e3f5c9b85eb0dfda51e667c7629c38ced269fb1345eb913b9295383506841ac48b44c27f5486a88352980adab9a5f13a22c0c014e3c968f1c
- SSDEEP 49152:thxw68tZnReHVbsDCb4JGqi/H9mLpQRwoXV:m68iYDCb4AqaHcI
- TLSH T1A7C57D317E46C53AE98600F54A6CBAEF425D9AA40F7145C792CC17EEE9381E32F31693
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory