92436576d63ab47e856fbd2802a1996836a83fa6ccfe20266b5a98429b301d30 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-07-11...er.exe

windows10-2004-x64

7

2026-07-11...er.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-11_b4218f67dc2287a990a8549fb82b39ba_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
Size 859KB
Sample260711-evvtyadw6x
SHA256 92436576d63ab47e856fbd2802a1996836a83fa6ccfe20266b5a98429b301d30
MD5 b4218f67dc2287a990a8549fb82b39ba
SHA1 88ec31d6d41c39fc54c26086dbf4d10dea8f5771
SHA512 ec3efebd2617601729a50a7ea07c16f72913f50ed0213cf68db02fea9539f8f205d9fcf3cda5d44a6a483b961f33a1a9cc599834d1bf6677f6f01a37cd3e36ca
SSDEEP 24576:LxcVyzMa2SrGxNt/px5fIW7guzjGB7HtTlK7/g:Ceb2Sr+3/LpIgpzjGB7N5K7/g
TLSH
T152150211B5D28472E6730A360EB8AAB559BD79220931CE7F23D40E6D9F35180D63AF73
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-07-11_b4218f67dc2287a990a8549fb82b39ba_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

14 signatures

150 seconds

discovery ransomware spyware stealer

Behavioral task

behavioral2

Sample

2026-07-11_b4218f67dc2287a990a8549fb82b39ba_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

150 seconds

discovery ransomware spyware stealer

Malware Config

Targets

- Target
  2026-07-11_b4218f67dc2287a990a8549fb82b39ba_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 859KB
- SHA256 92436576d63ab47e856fbd2802a1996836a83fa6ccfe20266b5a98429b301d30
- MD5 b4218f67dc2287a990a8549fb82b39ba
- SHA1 88ec31d6d41c39fc54c26086dbf4d10dea8f5771
- SHA512 ec3efebd2617601729a50a7ea07c16f72913f50ed0213cf68db02fea9539f8f205d9fcf3cda5d44a6a483b961f33a1a9cc599834d1bf6677f6f01a37cd3e36ca
- SSDEEP 24576:LxcVyzMa2SrGxNt/px5fIW7guzjGB7HtTlK7/g:Ceb2Sr+3/LpIgpzjGB7N5K7/g
- TLSH
  T152150211B5D28472E6730A360EB8AAB559BD79220931CE7F23D40E6D9F35180D63AF73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery ransomware spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomwarespywarestealer

behavioral2

discoveryransomwarespywarestealer

© 2018-2026

Terms | Privacy