2026-07-05_bb629f30cc1975b019d2d55824975fb9_elex_luca-stealer_njrat_remcos_smoke-loader

General

Target
2026-07-05_bb629f30cc1975b019d2d55824975fb9_elex_luca-stealer_njrat_remcos_smoke-loader
Size 438KB
Sample260705-sdn7qagx5m
SHA256 e5f89256b3526220d60fbe6f05bcb84657817e915cfc75cae07ecae7bfe6ceaa
MD5 bb629f30cc1975b019d2d55824975fb9
SHA1 fe308546c3b3598b891e682bc0d338925fa588f7
SHA512 8a8bcc518812171b7e4824b623edceeb635f024825ce69e66413dc59d1978f48775cad02f1982c68dc986e381776b92325783e071cada8e520e0b8ef0f773e45
SSDEEP 6144:HR9N6vGqdCivtNAH8X48Ft/KUEL3ZDRYy3HHe4RnDb0QecsmBb22NH:x9NEhv3AHXy4D7YQHe4RnDb0QXvJ22
TLSH
T1A794F015B8C080B6D5322D3104E5DAB2AE7C79704F6A9FAF639C477D2F700A063257AB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-05_bb629f30cc1975b019d2d55824975fb9_elex_luca-stealer_njrat_remcos_smoke-loader

File Explorer

2026-07-05_bb629f30cc1975b019d2d55824975fb9_elex_luca-stealer_njrat_remcos_smoke-loader

.exe 438KB

2026-07-05_bb629f30cc1975b019d2d55824975fb9_elex_luca-stealer_njrat_remcos_smoke-loader

IMPHASH d2f7d9868ee858403edd954baad91374
SHA256 e5f89256b3526220d60fbe6f05bcb84657817e915cfc75cae07ecae7bfe6ceaa
MD5 bb629f30cc1975b019d2d55824975fb9
SHA1 fe308546c3b3598b891e682bc0d338925fa588f7
SHA512 8a8bcc518812171b7e4824b623edceeb635f024825ce69e66413dc59d1978f48775cad02f1982c68dc986e381776b92325783e071cada8e520e0b8ef0f773e45
SSDEEP 6144:HR9N6vGqdCivtNAH8X48Ft/KUEL3ZDRYy3HHe4RnDb0QecsmBb22NH:x9NEhv3AHXy4D7YQHe4RnDb0QXvJ22
TLSH
T1A794F015B8C080B6D5322D3104E5DAB2AE7C79704F6A9FAF639C477D2F700A063257AB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

34419

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\vsproject\PEShell\Release\PEUnshell.pdb

kernel32

GetLocalTime lstrlenA Sleep lstrcmpiA GetLastError lstrcpyA WideCharToMultiByte ExitProcess SetEndOfFile HeapReAlloc HeapSize WriteConsoleW CreateFileW FlushFileBuffers QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RaiseException RtlUnwind SetLastError EncodePointer VirtualQuery EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ReadFile GetStdHandle WriteFile GetModuleFileNameA MultiByteToWideChar GetModuleHandleExW GetACP HeapFree HeapAlloc LCMapStringW GetFileType CloseHandle GetConsoleMode ReadConsoleW SetFilePointerEx GetConsoleCP FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW GetProcessHeap DecodePointer

user32

wsprintfA

Name

.text

Size

110KB

Virtual Size

110KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

284B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.ldata

Size

282KB

Virtual Size

281KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-05_bb629f30cc1975b019d2d55824975fb9_elex_luca-stealer_njrat_remcos_smoke-loader

kernel32

user32

generic