General
- Target 2026-07-17_b3af7a4b117b7139a5bb1eaa284f20d8_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 783KB
- Sample260717-jdk1maes9q
- SHA256 1963915d9185791a394f27062e97bd8763184cfe99826f2568949ae8b999e4a3
- MD5 b3af7a4b117b7139a5bb1eaa284f20d8
- SHA1 23bdbc64a8449be850dc1d6fb1347bc7cf0e52e8
- SHA512 278aae87d65d24c9879882e486b5af358cce44afa66a1866524b1b9f456dc72de4a3e87148d159ddc9d7e9c0d289744c0e95909b2145a719c6356c6dcbf91126
- SSDEEP 24576:4rAr+F4rvxLE4cnUJd/vJ/vA5kwzlUoq:Fq4rJLE4Vbh/vAqslUoq
- TLSH T1AA050212B5D2C0B5E4725E300CF5AE7499FDBDB20D74DA7F27E4072A5E30290953AAB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_b3af7a4b117b7139a5bb1eaa284f20d8_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_b3af7a4b117b7139a5bb1eaa284f20d8_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 783KB
- SHA256 1963915d9185791a394f27062e97bd8763184cfe99826f2568949ae8b999e4a3
- MD5 b3af7a4b117b7139a5bb1eaa284f20d8
- SHA1 23bdbc64a8449be850dc1d6fb1347bc7cf0e52e8
- SHA512 278aae87d65d24c9879882e486b5af358cce44afa66a1866524b1b9f456dc72de4a3e87148d159ddc9d7e9c0d289744c0e95909b2145a719c6356c6dcbf91126
- SSDEEP 24576:4rAr+F4rvxLE4cnUJd/vJ/vA5kwzlUoq:Fq4rJLE4Vbh/vAqslUoq
- TLSH T1AA050212B5D2C0B5E4725E300CF5AE7499FDBDB20D74DA7F27E4072A5E30290953AAB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1