General
- Target 2026-07-09_e7c9fc020ebb6cba35141b1caabf76bc_amadey_elex_jeefo_luca-stealer_njrat_wannacry
- Size 2.9MB
- Sample260709-tn86bad141
- SHA256 e4d28ee181196e48f1e61d5d026a8737ddaeed715c747809aeeb90726667c88e
- MD5 e7c9fc020ebb6cba35141b1caabf76bc
- SHA1 a58659f5490558273e803cb633c5bc061f08e4dd
- SHA512 cfd499f7d0cccdc8fa5f0f0be0dab82cb52d62f017d609b2bb68ea03780390eab8cadab1c4ba79209b68baca544a83ce9dc5d120b40423711d0d3096f6df277a
- SSDEEP 49152:lhn/wr0NpM67UCbQ0BsODxFoJ5/DgH206M2mG:lG0pM67y0BsODxbG
- TLSH T196E5AE21B605C072D8D222B1997E7FAB85BD9C14177456C3E3C41E2E9DB02D33F72A9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_e7c9fc020ebb6cba35141b1caabf76bc_amadey_elex_jeefo_luca-stealer_njrat_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_e7c9fc020ebb6cba35141b1caabf76bc_amadey_elex_jeefo_luca-stealer_njrat_wannacry.exe
Resource
win11ltsc2024-20260706-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_e7c9fc020ebb6cba35141b1caabf76bc_amadey_elex_jeefo_luca-stealer_njrat_wannacry
- Size 2.9MB
- SHA256 e4d28ee181196e48f1e61d5d026a8737ddaeed715c747809aeeb90726667c88e
- MD5 e7c9fc020ebb6cba35141b1caabf76bc
- SHA1 a58659f5490558273e803cb633c5bc061f08e4dd
- SHA512 cfd499f7d0cccdc8fa5f0f0be0dab82cb52d62f017d609b2bb68ea03780390eab8cadab1c4ba79209b68baca544a83ce9dc5d120b40423711d0d3096f6df277a
- SSDEEP 49152:lhn/wr0NpM67UCbQ0BsODxFoJ5/DgH206M2mG:lG0pM67y0BsODxbG
- TLSH T196E5AE21B605C072D8D222B1997E7FAB85BD9C14177456C3E3C41E2E9DB02D33F72A9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.