2026-07-01_adfab82f186200a2be0a8cfd04d0245e_amadey_elex_luca-stealer_njrat_remcos_stop

General

Target
2026-07-01_adfab82f186200a2be0a8cfd04d0245e_amadey_elex_luca-stealer_njrat_remcos_stop
Size 662KB
Sample260701-qdrazagz21
SHA256 5bb47b12e5b4111018313c8e6b587b0e26e43c22f1fc17049765800c309843df
MD5 adfab82f186200a2be0a8cfd04d0245e
SHA1 c6ff5429c6578abdd8c8f4a1c2c44098ed4e0166
SHA512 a71622b1f8000ea81e4a96213c6d3619e1b1bc6afdb0dda883dd153ee205f2dec7df9aba86916b46a7a54119fc34d68fc3db23132210c3dd02d05547bb972a51
SSDEEP 12288:VfUFGwTdoYqgNEIrEkoNk7L6zSZpsHQy5fJ1GLk2m:9AGArRoNk7BZpsHQy5Sk2
TLSH
T1C0E49D1173D08433E2B3297549BDA2605ABDBD712F21D38FB794162E5EB13C1AA3172B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-01_adfab82f186200a2be0a8cfd04d0245e_amadey_elex_luca-stealer_njrat_remcos_stop

2026-07-01_adfab82f186200a2be0a8cfd04d0245e_amadey_elex_luca-stealer_njrat_remcos_stop

.exe 662KB

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 5bb47b12e5b4111018313c8e6b587b0e26e43c22f1fc17049765800c309843df
MD5 adfab82f186200a2be0a8cfd04d0245e
SHA1 c6ff5429c6578abdd8c8f4a1c2c44098ed4e0166
SHA512 a71622b1f8000ea81e4a96213c6d3619e1b1bc6afdb0dda883dd153ee205f2dec7df9aba86916b46a7a54119fc34d68fc3db23132210c3dd02d05547bb972a51
SSDEEP 12288:VfUFGwTdoYqgNEIrEkoNk7L6zSZpsHQy5fJ1GLk2m:9AGArRoNk7BZpsHQy5Sk2
TLSH
T1C0E49D1173D08433E2B3297549BDA2605ABDBD712F21D38FB794162E5EB13C1AA3172B
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

103182

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

SMSvcHost.pdb