General
- Target 2026-07-17_c2ea53bfacb841b915cd58acf0a4a7e9_amadey_elex_luca-stealer_magniber_njrat_remcos
- Size 1.6MB
- Sample260717-wz98vset2z
- SHA256 c8870bec3111dd73f5cd6807c646e3bfbda1ab745cf0a404e17abc3acb6e20b5
- MD5 c2ea53bfacb841b915cd58acf0a4a7e9
- SHA1 6290315875eb51f6e8c93ba9c2ea3c08b290283c
- SHA512 8b4dd7a8d4b35137a2864bdbd93d049cf4a9bc9a74983a85bc8624c6d9bfc6061b57f587847e33d583f117078d46d07f105e48b3826b7bd471b4100a6cb8dad7
- SSDEEP 24576:3PVhKlXFo5ktb55sneB0xrTiJnPCBsr4oysqjnhMgeiCl7G0nehbGZpbD:3Xqo5klsBWVHr4o2Dmg27RnWGj
- TLSH T12375D0217985C036CB6224B2497CE66A04ADBD310F314ADB73D82A7E5F704D35F3AA67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_c2ea53bfacb841b915cd58acf0a4a7e9_amadey_elex_luca-stealer_magniber_njrat_remcos.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_c2ea53bfacb841b915cd58acf0a4a7e9_amadey_elex_luca-stealer_magniber_njrat_remcos
- Size 1.6MB
- SHA256 c8870bec3111dd73f5cd6807c646e3bfbda1ab745cf0a404e17abc3acb6e20b5
- MD5 c2ea53bfacb841b915cd58acf0a4a7e9
- SHA1 6290315875eb51f6e8c93ba9c2ea3c08b290283c
- SHA512 8b4dd7a8d4b35137a2864bdbd93d049cf4a9bc9a74983a85bc8624c6d9bfc6061b57f587847e33d583f117078d46d07f105e48b3826b7bd471b4100a6cb8dad7
- SSDEEP 24576:3PVhKlXFo5ktb55sneB0xrTiJnPCBsr4oysqjnhMgeiCl7G0nehbGZpbD:3Xqo5klsBWVHr4o2Dmg27RnWGj
- TLSH T12375D0217985C036CB6224B2497CE66A04ADBD310F314ADB73D82A7E5F704D35F3AA67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1