General
- Target 2026-07-17_c811820aefa6cc20fc0aa7d4e937f794_amadey_elex_luca-stealer_mespinoza_njrat_remcos_smoke-loader
- Size 9.2MB
- Sample260718-cklr6sgw3w
- SHA256 b849eb5ac4bfd7321c806d71b833f76af44631ee599bea695cc119a28b1b8433
- MD5 c811820aefa6cc20fc0aa7d4e937f794
- SHA1 eff07f7892a993a914706a07acf99a2ed2891e3f
- SHA512 19aa1ca5e54c0d58bfb95337865d3b5d7fa34670ce004cdbca02292fdbbee0ce74413666fccd6324a4ec4900000452892af640faff6edfb4b4717987af8c9886
- SSDEEP 196608:iFiOcBq3sWybnmEQ/MDGEgIF5u93uRu+maC7aBPErSu73/xw:rNIObnmEQ/UXbUxpaVEOu7vxw
- TLSH T155A601D07361F828DB990270483576F596A626303720D9EABECF76D219683C4EDF1E36
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_c811820aefa6cc20fc0aa7d4e937f794_amadey_elex_luca-stealer_mespinoza_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_c811820aefa6cc20fc0aa7d4e937f794_amadey_elex_luca-stealer_mespinoza_njrat_remcos_smoke-loader
- Size 9.2MB
- SHA256 b849eb5ac4bfd7321c806d71b833f76af44631ee599bea695cc119a28b1b8433
- MD5 c811820aefa6cc20fc0aa7d4e937f794
- SHA1 eff07f7892a993a914706a07acf99a2ed2891e3f
- SHA512 19aa1ca5e54c0d58bfb95337865d3b5d7fa34670ce004cdbca02292fdbbee0ce74413666fccd6324a4ec4900000452892af640faff6edfb4b4717987af8c9886
- SSDEEP 196608:iFiOcBq3sWybnmEQ/MDGEgIF5u93uRu+maC7aBPErSu73/xw:rNIObnmEQ/UXbUxpaVEOu7vxw
- TLSH T155A601D07361F828DB990270483576F596A626303720D9EABECF76D219683C4EDF1E36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.