General
- Target 2026-07-07_f7d68f4634534a5fc296c628b46fc9b5_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 459KB
- Sample260707-srn4wagy6k
- SHA256 b0400ea208341aad17cc25818d19ac9c2e63f8384db4b2f251e50050217be3ba
- MD5 f7d68f4634534a5fc296c628b46fc9b5
- SHA1 1cc24571614af9870bff7cb6441350f81263583b
- SHA512 76f46e5cfec0c097e0d5c610c7962d6d03ca49572454957e562c712d10c78aff9fb0081652e76baac989e14f2924c7f68debb40226f7cb7bc01268c1003ee7d6
- SSDEEP 12288:RafcjuhaNTW5WVZdisDfxnxgMnbEmZjFdHtMWDc:R3oCTWeZTfxnW9yFdNM+c
- TLSH T127A4E121B4C0C0B1D073143404F5C7B66D7DBE715B6982DBA3A87B794F303E1667A9AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_f7d68f4634534a5fc296c628b46fc9b5_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_f7d68f4634534a5fc296c628b46fc9b5_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_f7d68f4634534a5fc296c628b46fc9b5_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 459KB
- SHA256 b0400ea208341aad17cc25818d19ac9c2e63f8384db4b2f251e50050217be3ba
- MD5 f7d68f4634534a5fc296c628b46fc9b5
- SHA1 1cc24571614af9870bff7cb6441350f81263583b
- SHA512 76f46e5cfec0c097e0d5c610c7962d6d03ca49572454957e562c712d10c78aff9fb0081652e76baac989e14f2924c7f68debb40226f7cb7bc01268c1003ee7d6
- SSDEEP 12288:RafcjuhaNTW5WVZdisDfxnxgMnbEmZjFdHtMWDc:R3oCTWeZTfxnW9yFdNM+c
- TLSH T127A4E121B4C0C0B1D073143404F5C7B66D7DBE715B6982DBA3A87B794F303E1667A9AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.