General
- Target 2026-07-14_6e83a25ea7410f16a95d9c2d477dd808_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 787KB
- Sample260714-eas5lsdw8l
- SHA256 c666de25b58904c9d4245b48c5b33420e754d78c0edd21ed93819c235cad1b65
- MD5 6e83a25ea7410f16a95d9c2d477dd808
- SHA1 e247eb6bb9670230adf17375524cfc34da36f9d7
- SHA512 b95a8ec486134bd45926c00807ebe0e3d362621e006dd62157d2da5af13a98a04826ef1b8bce524031722b65a60a2d38827aae8032a3ff6e53ac5bd34861a908
- SSDEEP 12288:nr5A62A+xy4rvx+aFSZ337fq0xoOWXPRGUiPeOOyyXDg1AuqmVns9m:nr5r+I4rvxL8d37yt8UTnzXndAns9m
- TLSH T17605021274E384B2E1B60A3109F4A9715AFCBD320A618B3F23D5477E6F741D1962AE73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_6e83a25ea7410f16a95d9c2d477dd808_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_6e83a25ea7410f16a95d9c2d477dd808_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_6e83a25ea7410f16a95d9c2d477dd808_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 787KB
- SHA256 c666de25b58904c9d4245b48c5b33420e754d78c0edd21ed93819c235cad1b65
- MD5 6e83a25ea7410f16a95d9c2d477dd808
- SHA1 e247eb6bb9670230adf17375524cfc34da36f9d7
- SHA512 b95a8ec486134bd45926c00807ebe0e3d362621e006dd62157d2da5af13a98a04826ef1b8bce524031722b65a60a2d38827aae8032a3ff6e53ac5bd34861a908
- SSDEEP 12288:nr5A62A+xy4rvx+aFSZ337fq0xoOWXPRGUiPeOOyyXDg1AuqmVns9m:nr5r+I4rvxL8d37yt8UTnzXndAns9m
- TLSH T17605021274E384B2E1B60A3109F4A9715AFCBD320A618B3F23D5477E6F741D1962AE73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1