General
- Target 2026-07-14_2c7836d76fdbe0ad44a9b477cb043c02_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 863KB
- Sample260714-ev67zad15l
- SHA256 abf04ff3bcb39c7162f8d8ea59987242ce645cfab6ff08c4dc68d921dfc8a325
- MD5 2c7836d76fdbe0ad44a9b477cb043c02
- SHA1 8540c42e290a770a01c10eb81f7aed0bfe30ee69
- SHA512 393b036cfa19545c55e62d5fdf4f0b55d61b5df3f38dccca46e7d832dd0787bf95db3d4a3527f1e842b6ccc4b8b1bc5b37edf3d4bce79a729d76b1da43480f87
- SSDEEP 24576:bxcVyzLx2SrGxZd37yt8UTnzXndAns9m:yet2Sr+X3+qyzXnN9m
- TLSH T14415021275A188B7F6B309320D796A724AFCB9320831CB2F23D40A5D9E75590D53AF73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_2c7836d76fdbe0ad44a9b477cb043c02_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_2c7836d76fdbe0ad44a9b477cb043c02_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_2c7836d76fdbe0ad44a9b477cb043c02_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 863KB
- SHA256 abf04ff3bcb39c7162f8d8ea59987242ce645cfab6ff08c4dc68d921dfc8a325
- MD5 2c7836d76fdbe0ad44a9b477cb043c02
- SHA1 8540c42e290a770a01c10eb81f7aed0bfe30ee69
- SHA512 393b036cfa19545c55e62d5fdf4f0b55d61b5df3f38dccca46e7d832dd0787bf95db3d4a3527f1e842b6ccc4b8b1bc5b37edf3d4bce79a729d76b1da43480f87
- SSDEEP 24576:bxcVyzLx2SrGxZd37yt8UTnzXndAns9m:yet2Sr+X3+qyzXnN9m
- TLSH T14415021275A188B7F6B309320D796A724AFCB9320831CB2F23D40A5D9E75590D53AF73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1