General
- Target 2026-07-09_26bd1a25400ada2b294c4f0f7dcf9fa0_amadey_elex_luca-stealer_njrat_smoke-loader
- Size 12.2MB
- Sample260709-p9fzfaaz5n
- SHA256 f603eec4285e04e58a4b2e5ded37f73dce493a6daea4a87e50e49bf695557add
- MD5 26bd1a25400ada2b294c4f0f7dcf9fa0
- SHA1 d6fb002475cf390ef0e263ee7166ebc5e39b1f52
- SHA512 bb0148a6ef5395faea699360eae03262fb1f62e4573c7626898f2038c45fc2c209c0f45d53aecc171564ae8a7ce253be412cecdbb6578d1d3b69a84169b33db5
- SSDEEP 196608:Q7nmkeN5+aGbXUgYuDwy+yndSLfFYBOl7S1U3dW7iUK/Z5PoBr24XyFkh3:QzmMb9Yu8X8dSLfKBk7SrAZGr24ws
- TLSH T1D8D6F120E205E019F87B057199FD958C6858BA300F2884FB72C87EFEDA79AD17D35267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_26bd1a25400ada2b294c4f0f7dcf9fa0_amadey_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_26bd1a25400ada2b294c4f0f7dcf9fa0_amadey_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260706-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_26bd1a25400ada2b294c4f0f7dcf9fa0_amadey_elex_luca-stealer_njrat_smoke-loader
- Size 12.2MB
- SHA256 f603eec4285e04e58a4b2e5ded37f73dce493a6daea4a87e50e49bf695557add
- MD5 26bd1a25400ada2b294c4f0f7dcf9fa0
- SHA1 d6fb002475cf390ef0e263ee7166ebc5e39b1f52
- SHA512 bb0148a6ef5395faea699360eae03262fb1f62e4573c7626898f2038c45fc2c209c0f45d53aecc171564ae8a7ce253be412cecdbb6578d1d3b69a84169b33db5
- SSDEEP 196608:Q7nmkeN5+aGbXUgYuDwy+yndSLfFYBOl7S1U3dW7iUK/Z5PoBr24XyFkh3:QzmMb9Yu8X8dSLfKBk7SrAZGr24ws
- TLSH T1D8D6F120E205E019F87B057199FD958C6858BA300F2884FB72C87EFEDA79AD17D35267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.