2026-07-08_50a9e3774723f847b551eb5b7e3d4c89_amadey_elex_luca-stealer_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-08_50a9e3774723f847b551eb5b7e3d4c89_amadey_elex_luca-stealer_njrat_smoke-loader
Size 7.4MB
Sample260708-e934vsaz6x
SHA256 c2d974f8b294cfe8bd442852a8ddf9cede54fa82681f692894c26651463fb99f
MD5 50a9e3774723f847b551eb5b7e3d4c89
SHA1 08ad3e0afc8e21d91b963d0a2f3a25a60a795443
SHA512 1b657eed7fc03aaa09c233d6e1ffa27c19db1be0397ac911456d07f32ab9bbde681b88fed06e6e5a02af6facf06c33073f2f93e01ca9e569017a173165db30a8
SSDEEP 49152:ZmOZhPoIYDgrAd+eTrUZOQjGLVSFCy+WAsTh5nxA7CDAWLT1jCTEH0uNN1NnHuTJ:ZvZhPoIRrL/Z
TLSH
T100761221B885C263CE8240F6D67EF978521D9C658B4902D712DC7EEF72B11E23B36993
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-08_50a9e3774723f847b551eb5b7e3d4c89_amadey_elex_luca-stealer_njrat_smoke-loader

File Explorer

2026-07-08_50a9e3774723f847b551eb5b7e3d4c89_amadey_elex_luca-stealer_njrat_smoke-loader

.exe 7.4MB

2026-07-08_50a9e3774723f847b551eb5b7e3d4c89_amadey_elex_luca-stealer_njrat_smoke-loader

IMPHASH 09b4c133b0aff8597aba9095dfdf60aa
SHA256 c2d974f8b294cfe8bd442852a8ddf9cede54fa82681f692894c26651463fb99f
MD5 50a9e3774723f847b551eb5b7e3d4c89
SHA1 08ad3e0afc8e21d91b963d0a2f3a25a60a795443
SHA512 1b657eed7fc03aaa09c233d6e1ffa27c19db1be0397ac911456d07f32ab9bbde681b88fed06e6e5a02af6facf06c33073f2f93e01ca9e569017a173165db30a8
SSDEEP 49152:ZmOZhPoIYDgrAd+eTrUZOQjGLVSFCy+WAsTh5nxA7CDAWLT1jCTEH0uNN1NnHuTJ:ZvZhPoIRrL/Z
TLSH
T100761221B885C263CE8240F6D67EF978521D9C658B4902D712DC7EEF72B11E23B36993
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14226

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\ponos\OneDrive\Desktop\PE-Crypter-main\PELoader\Release\PELoader.pdb

crypt32

CryptStringToBinaryA

kernel32

GetProcessHeap FindAtomA GetAtomNameA GetActiveProcessorCount VirtualAlloc GetModuleFileNameA GetModuleHandleA LoadLibraryA HeapAlloc TerminateProcess FreeLibrary CreateFileW HeapSize GetTimeZoneInformation HeapReAlloc ReadConsoleW SetFilePointerEx GetFileSizeEx ReadFile GetCurrentDirectoryA HeapFree GetCurrentProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW IsProcessorFeaturePresent FormatMessageA EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection LocalFree GetLocaleInfoEx EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetStringTypeW CompareStringEx GetCPInfo RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetProcAddress GetCommandLineA GetCommandLineW GetCurrentThread IsDebuggerPresent UnhandledExceptionFilter OutputDebugStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetTempPathW IsThreadAFiber VirtualProtect LoadLibraryExW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW SetConsoleCtrlHandler CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode WriteConsoleW

user32

GetParent GetCursorPos GetMenu GetActiveWindow GetWindowThreadProcessId SoundSentry

advapi32

GetCurrentHwProfileA IsTextUnicode

Name

.text

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

104KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5.7MB

Virtual Size

5.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

270B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

409B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

46KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-08_50a9e3774723f847b551eb5b7e3d4c89_amadey_elex_luca-stealer_njrat_smoke-loader

crypt32

kernel32

user32

advapi32

generic