General
- Target 2026-07-17_8df42f16f8bbd6fbc95d7996c863f517_amadey_elex_luca-stealer_magniber_njrat_remcos
- Size 1.8MB
- Sample260717-xe277afs2t
- SHA256 4675f8ec58d3cbc4117b122b510823fc384654a8369234b1e22a60947975103e
- MD5 8df42f16f8bbd6fbc95d7996c863f517
- SHA1 7ba466b14292c095ccf38a021eaf92f01e5cd004
- SHA512 9e26a9778ed5c84588b9388e6ea29c7702e9ccb9c24e6e34251ac0085d9aa3fd976fb515c8e7dd62e4e96e651c9fec821e3c2b7d35016a5a2c1201b300b09a36
- SSDEEP 24576:hS1yP2pluiCIUBFGnvw80R6UwY8TFe5L/XfXtasqjnhMgeiCl7G0nehbGZpbD:hSguplAGnv107Nv5LXtuDmg27RnWGj
- TLSH T11E85CF213A86D832C97160704B3ED7EA565DEE300B2384DBA3D81A395A754C37F39B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_8df42f16f8bbd6fbc95d7996c863f517_amadey_elex_luca-stealer_magniber_njrat_remcos.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_8df42f16f8bbd6fbc95d7996c863f517_amadey_elex_luca-stealer_magniber_njrat_remcos.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_8df42f16f8bbd6fbc95d7996c863f517_amadey_elex_luca-stealer_magniber_njrat_remcos
- Size 1.8MB
- SHA256 4675f8ec58d3cbc4117b122b510823fc384654a8369234b1e22a60947975103e
- MD5 8df42f16f8bbd6fbc95d7996c863f517
- SHA1 7ba466b14292c095ccf38a021eaf92f01e5cd004
- SHA512 9e26a9778ed5c84588b9388e6ea29c7702e9ccb9c24e6e34251ac0085d9aa3fd976fb515c8e7dd62e4e96e651c9fec821e3c2b7d35016a5a2c1201b300b09a36
- SSDEEP 24576:hS1yP2pluiCIUBFGnvw80R6UwY8TFe5L/XfXtasqjnhMgeiCl7G0nehbGZpbD:hSguplAGnv107Nv5LXtuDmg27RnWGj
- TLSH T11E85CF213A86D832C97160704B3ED7EA565DEE300B2384DBA3D81A395A754C37F39B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1