General

  • Target
    2026-07-06_e71a70d38eb1bb2ded22398d8144ddd2_amadey_elex_hijackloader_luca-stealer_njrat_play
  • Size 28.8MB
  • Sample260707-alcjsabs9r
  • SHA256 4ea8461915643bc2600c96b12421b9c4683ee76b29a0f7eb907b3149377371b9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-06_e71a70d38eb1bb2ded22398d8144ddd2_amadey_elex_hijackloader_luca-stealer_njrat_play
    • Size 28.8MB
    • SHA256 4ea8461915643bc2600c96b12421b9c4683ee76b29a0f7eb907b3149377371b9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects binaries and memory artifacts referencing sandbox product IDs

    • Detects executables packed with ASPack

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks