General
- Target 2026-07-14_e68d543e6792fb79494db7e3f8722fce_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 862KB
- Sample260714-dbah8acy3j
- SHA256 801a5b2246b29a8521c45d33428f139d0b68192811e95b000bb35f24b4171453
- MD5 e68d543e6792fb79494db7e3f8722fce
- SHA1 e15bdca0a7d7d07ff08a5c49ec0d506eb5fd9d19
- SHA512 d622ffac4767e5ba83384fd2ed4bb1952b6cb6999967684f1f30d0e1e1c339da7d44d391d57c1e9cbc51fe30d04a7b7e37359cd1e1829fe36755780eb73b499f
- SSDEEP 24576:NxcVyzLD2SrGxsp8SXdo8ke5i5Xh6wnBLTHTAcZQ/:ceX2Sr+sWS1SZBnHTAsi
- TLSH T143150211BAE18C72F6B305321DB899656AFDB93108328F2F13D40A5E9E71590D63AF73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_e68d543e6792fb79494db7e3f8722fce_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_e68d543e6792fb79494db7e3f8722fce_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 862KB
- SHA256 801a5b2246b29a8521c45d33428f139d0b68192811e95b000bb35f24b4171453
- MD5 e68d543e6792fb79494db7e3f8722fce
- SHA1 e15bdca0a7d7d07ff08a5c49ec0d506eb5fd9d19
- SHA512 d622ffac4767e5ba83384fd2ed4bb1952b6cb6999967684f1f30d0e1e1c339da7d44d391d57c1e9cbc51fe30d04a7b7e37359cd1e1829fe36755780eb73b499f
- SSDEEP 24576:NxcVyzLD2SrGxsp8SXdo8ke5i5Xh6wnBLTHTAcZQ/:ceX2Sr+sWS1SZBnHTAsi
- TLSH T143150211BAE18C72F6B305321DB899656AFDB93108328F2F13D40A5E9E71590D63AF73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1