General
- Target 2026-07-05_2b708fb2aee2498cdc139dc8b3f566f3_amadey_elex_luca-stealer_njrat_smoke-loader
- Size 11.9MB
- Sample260705-b63r5sb14m
- SHA256 c6741be12e2dfd12a0128392eb24a33fee6c714b5a490b400e118c66c4f523a8
- MD5 2b708fb2aee2498cdc139dc8b3f566f3
- SHA1 094272c7f92e2d0bfb5374f6b8720d9049175e90
- SHA512 4f43bdc3dec93998036ffaca22a3adb20abf26ad24af15342c738bfa565269147e9ea74e6a3e17d249d84b0a8f57e696d9fe99a768e468933ed9b3d894f0daf2
- SSDEEP 196608:cO+xeI6cocPMV4Xkp3DQUq8QMph/IjMxLp8YQSMaF6p9utRHOyrXyFkhW:f+/OWoojMxL7Tm9uiewF
- TLSH T1F4C6E122E201D01AF8B205B5DEED9599B09CBA704B1844D3B3887EFEEA792D17D31177
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_2b708fb2aee2498cdc139dc8b3f566f3_amadey_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_2b708fb2aee2498cdc139dc8b3f566f3_amadey_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_2b708fb2aee2498cdc139dc8b3f566f3_amadey_elex_luca-stealer_njrat_smoke-loader
- Size 11.9MB
- SHA256 c6741be12e2dfd12a0128392eb24a33fee6c714b5a490b400e118c66c4f523a8
- MD5 2b708fb2aee2498cdc139dc8b3f566f3
- SHA1 094272c7f92e2d0bfb5374f6b8720d9049175e90
- SHA512 4f43bdc3dec93998036ffaca22a3adb20abf26ad24af15342c738bfa565269147e9ea74e6a3e17d249d84b0a8f57e696d9fe99a768e468933ed9b3d894f0daf2
- SSDEEP 196608:cO+xeI6cocPMV4Xkp3DQUq8QMph/IjMxLp8YQSMaF6p9utRHOyrXyFkhW:f+/OWoojMxL7Tm9uiewF
- TLSH T1F4C6E122E201D01AF8B205B5DEED9599B09CBA704B1844D3B3887EFEEA792D17D31177
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.