General
- Target 2026-07-11_2514682784f9d0bfa35cb6e35d2e7e9f_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 783KB
- Sample260711-ffb9qaby9k
- SHA256 84478c1725e8dad73a5e3a946102a35d66a0e65aef1f4952994fe5d54320f9b4
- MD5 2514682784f9d0bfa35cb6e35d2e7e9f
- SHA1 2453289322736776a9ecea68fd684f7f78c322fd
- SHA512 b4635234723f2679e841da7cbbb8990af78b3024c62d582175be33efe146b609bc9d4b1a0822eaec1da5c9bbbd70a72ccd15e1a9ca91ffb13f8fa8ed8d79324d
- SSDEEP 24576:yrUr+I4rvxLwt/px5fIW7guzjGB7HtTlK7/g:br4rJL8/LpIgpzjGB7N5K7/g
- TLSH T1C3050111B4D380B1C1764E390AF4AA7459BDB9310A319E7F27E81B3D1F79181963AEB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_2514682784f9d0bfa35cb6e35d2e7e9f_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_2514682784f9d0bfa35cb6e35d2e7e9f_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_2514682784f9d0bfa35cb6e35d2e7e9f_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 783KB
- SHA256 84478c1725e8dad73a5e3a946102a35d66a0e65aef1f4952994fe5d54320f9b4
- MD5 2514682784f9d0bfa35cb6e35d2e7e9f
- SHA1 2453289322736776a9ecea68fd684f7f78c322fd
- SHA512 b4635234723f2679e841da7cbbb8990af78b3024c62d582175be33efe146b609bc9d4b1a0822eaec1da5c9bbbd70a72ccd15e1a9ca91ffb13f8fa8ed8d79324d
- SSDEEP 24576:yrUr+I4rvxLwt/px5fIW7guzjGB7HtTlK7/g:br4rJL8/LpIgpzjGB7N5K7/g
- TLSH T1C3050111B4D380B1C1764E390AF4AA7459BDB9310A319E7F27E81B3D1F79181963AEB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1