2026-07-19_2002eb60a12032a54fe999c13bdb0bfa_amadey_elex_luca-stealer_njrat_remcos_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-19_2002eb60a12032a54fe999c13bdb0bfa_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
Size 9.2MB
Sample260719-3dendsat9x
SHA256 50c6015a868c2795ba5d034d268e9c0a639a5a238bc6cd07e3fc19352055105a
MD5 2002eb60a12032a54fe999c13bdb0bfa
SHA1 7847fcc44fe21d756a1ac8052d55c5c603a01949
SHA512 1937023e0e83d62ef5f991cf77cec93931ab11ef3b3667b3491600e4e714d0c1968ecfe78958d37ee94b363a84f794a1a23f61a3f644d685d992a216c1a8162b
SSDEEP 196608:ZKwuntNHFiab0fNWsxkuzHCOweP/haiZLp+8ySYNrQb05:ZKxnvln0KCHNNnhVZLpWZk05
TLSH
T1D5A633803762F93AFF5500704835B66D012AA6343715C5DFBBCA69DA1E680E26FB2D73
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-19_2002eb60a12032a54fe999c13bdb0bfa_amadey_elex_luca-stealer_njrat_remcos_smoke-loader

File Explorer

2026-07-19_2002eb60a12032a54fe999c13bdb0bfa_amadey_elex_luca-stealer_njrat_remcos_smoke-loader

.exe 9.2MB

2026-07-19_2002eb60a12032a54fe999c13bdb0bfa_amadey_elex_luca-stealer_njrat_remcos_smoke-loader

IMPHASH 7d7271b13182b837d7d6f20b377e203b
SHA256 50c6015a868c2795ba5d034d268e9c0a639a5a238bc6cd07e3fc19352055105a
MD5 2002eb60a12032a54fe999c13bdb0bfa
SHA1 7847fcc44fe21d756a1ac8052d55c5c603a01949
SHA512 1937023e0e83d62ef5f991cf77cec93931ab11ef3b3667b3491600e4e714d0c1968ecfe78958d37ee94b363a84f794a1a23f61a3f644d685d992a216c1a8162b
SSDEEP 196608:ZKwuntNHFiab0fNWsxkuzHCOweP/haiZLp+8ySYNrQb05:ZKxnvln0KCHNNnhVZLpWZk05
TLSH
T1D5A633803762F93AFF5500704835B66D012AA6343715C5DFBBCA69DA1E680E26FB2D73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

CreatePropertySheetPageW CreatePropertySheetPageA

kernel32

QueryPerformanceCounter GetTickCount CreateWaitableTimerW GetLastError WideCharToMultiByte MultiByteToWideChar AreFileApisANSI LoadLibraryExW LoadLibraryW GetModuleFileNameA GetModuleFileNameW FormatMessageA FormatMessageW LocalFree GetSystemDirectoryW CreateFileW SetFileTime CloseHandle SetFileAttributesA SetFileAttributesW RemoveDirectoryA RemoveDirectoryW CreateDirectoryA CreateDirectoryW DeleteFileA DeleteFileW SetCurrentDirectoryA SetCurrentDirectoryW GetCurrentDirectoryA GetCurrentDirectoryW GetTempPathA GetTempPathW GetFileInformationByHandle GetStdHandle FindClose FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW GetModuleHandleA GetFileAttributesA GetFileAttributesW CreateFileA GetFileSize SetFilePointer ReadFile WriteFile SetEndOfFile GetCurrentProcess SetLastError GetCurrentThreadId GlobalMemoryStatus GetSystemTimeAsFileTime Sleep GetVersion IsProcessorFeaturePresent ReleaseSemaphore InitializeCriticalSection WaitForSingleObject SetEvent ResetEvent CreateSemaphoreA CreateEventA GetVersionExA GetModuleHandleW CreateProcessA SetFilePointerEx HeapSize GetConsoleMode GetConsoleCP FlushFileBuffers SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP WriteConsoleW IsValidCodePage FindFirstFileExA GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW HeapReAlloc GetACP ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount GetCurrentProcessId LeaveCriticalSection EnterCriticalSection DeleteCriticalSection IsBadReadPtr FreeLibrary GetProcAddress HeapAlloc GetNativeSystemInfo LoadLibraryA VirtualAlloc GetSystemInfo VirtualFree HeapFree GetProcessAffinityMask RaiseException RtlUnwind GetCPInfo LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx GetStringTypeW InitializeSListHead GetStartupInfoW IsDebuggerPresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter

user32

DestroyWindow LoadIconA EndDialog KillTimer SetTimer PostMessageA SendMessageA MessageBoxW SetWindowTextW SetWindowTextA LoadStringW LoadStringA DialogBoxParamW DialogBoxParamA GetDlgItem GetWindowLongA SetWindowLongA ShowWindow CharUpperA CharUpperW SetScrollInfo GetScrollRange EnableScrollBar

gdi32

GetClipRgn RemoveFontResourceExA EnumFontFamiliesExW CancelDC GetPixel CreateDIBitmap GetPath GetWinMetaFileBits SetBkMode ChoosePixelFormat DeleteColorSpace Chord GetViewportOrgEx GetTextFaceA

comdlg32

GetFileTitleA

oleaut32

VariantClear SysAllocStringLen SysStringLen VarR8FromI4 VarR4FromI2 VarR4FromUI4 SafeArrayUnaccessData VarI4FromUI1 VarBoolFromI1 VarUI2FromUI4 GetErrorInfo VarI2FromR8 VarR4FromStr VarR8FromBool VarUI4FromUI8 VarUI4FromStr

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-19_2002eb60a12032a54fe999c13bdb0bfa_amadey_elex_luca-stealer_njrat_remcos_smoke-loader

comctl32

kernel32

user32

gdi32

comdlg32

oleaut32

generic