General
- Target 2026-07-17_31d7fa53ff79087a5f91a69492076b5c_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 869KB
- Sample260717-l284gact4s
- SHA256 fb7270987811c1782735def6617c0762b2555d8c2be2764e1eea81d37dad1091
- MD5 31d7fa53ff79087a5f91a69492076b5c
- SHA1 6119f94a556ad136888c6ad99a8703f8fa5ddaa0
- SHA512 fad6c1bca996773508291ba08fd314992e6a255feb40920ea751accf83d03dc4ee0e9c3cb92c4438132631feb978067411351fe01383e6d7c1f1135f71c359f2
- SSDEEP 6144:a6hVEcoiLbiJIRQEtcTUNiagQD1G9AOUfK/6eGm6v+g5NKODsZ0qO+x:a6hV3oOJRZtcANBameGmY1KaqO+x
- TLSH T14015B6E51A83ADA4E9B10A30233F1378E7CE5D59A352F27ED546F090A2F56C2F1476E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_31d7fa53ff79087a5f91a69492076b5c_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_31d7fa53ff79087a5f91a69492076b5c_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_31d7fa53ff79087a5f91a69492076b5c_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 869KB
- SHA256 fb7270987811c1782735def6617c0762b2555d8c2be2764e1eea81d37dad1091
- MD5 31d7fa53ff79087a5f91a69492076b5c
- SHA1 6119f94a556ad136888c6ad99a8703f8fa5ddaa0
- SHA512 fad6c1bca996773508291ba08fd314992e6a255feb40920ea751accf83d03dc4ee0e9c3cb92c4438132631feb978067411351fe01383e6d7c1f1135f71c359f2
- SSDEEP 6144:a6hVEcoiLbiJIRQEtcTUNiagQD1G9AOUfK/6eGm6v+g5NKODsZ0qO+x:a6hV3oOJRZtcANBameGmY1KaqO+x
- TLSH T14015B6E51A83ADA4E9B10A30233F1378E7CE5D59A352F27ED546F090A2F56C2F1476E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.