General
- Target 2026-07-11_4bdc6935b8375ba4ecee281c2b115051_amadey_blankgrabber_elex_luca-stealer_njrat_smoke-loader
- Size 1.1MB
- Sample260711-e9wpsadz7t
- SHA256 a8d40391d7ee98d784fe795d1706ed0529389b7d023ec9987fda0bd68b00f026
- MD5 4bdc6935b8375ba4ecee281c2b115051
- SHA1 866c39286fe408c6b94c852db7f25224fa5ef70c
- SHA512 c6bad1c65f6905eb99ddd07e522f932e88ffd8064c98700de0e49dc23bc59d807c287972bb06f145dd874f32266e8536f6017acdc08cbe939944662364990c80
- SSDEEP 24576:QzOIOdpPLGDI1r8wbTQT2u3h0lhSMXll7oparz9t1:QKjdpPyDIdbTBBprzP1
- TLSH T1A045BF11BD9183B6E05206B016BECF79AF3A7C31472146CBA3A076A58CB16D16F33D5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_4bdc6935b8375ba4ecee281c2b115051_amadey_blankgrabber_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_4bdc6935b8375ba4ecee281c2b115051_amadey_blankgrabber_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_4bdc6935b8375ba4ecee281c2b115051_amadey_blankgrabber_elex_luca-stealer_njrat_smoke-loader
- Size 1.1MB
- SHA256 a8d40391d7ee98d784fe795d1706ed0529389b7d023ec9987fda0bd68b00f026
- MD5 4bdc6935b8375ba4ecee281c2b115051
- SHA1 866c39286fe408c6b94c852db7f25224fa5ef70c
- SHA512 c6bad1c65f6905eb99ddd07e522f932e88ffd8064c98700de0e49dc23bc59d807c287972bb06f145dd874f32266e8536f6017acdc08cbe939944662364990c80
- SSDEEP 24576:QzOIOdpPLGDI1r8wbTQT2u3h0lhSMXll7oparz9t1:QKjdpPyDIdbTBBprzP1
- TLSH T1A045BF11BD9183B6E05206B016BECF79AF3A7C31472146CBA3A076A58CB16D16F33D5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1