2026-07-19_be653ab66a72e21f516118bc38c70252_amadey_elex_luca-stealer_njrat_remcos_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-19_be653ab66a72e21f516118bc38c70252_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
Size 9.2MB
Sample260719-xdsmcsbz2w
SHA256 d9ad60868f30094aed31395eaf077a7c0615b62b1442083858a21a6768c72d97
MD5 be653ab66a72e21f516118bc38c70252
SHA1 1c3f5ef9496edb6a4f828a15ca2fe2be44d227d2
SHA512 0bc77a391a1db2aac97e6b05516ebe5d37fe56f77f00424c5661e37a449eee6b7fe1b2d2683bfe935e66ce9aa5c0b12d3f59f648f41d64dcdfd0779ab39270c3
SSDEEP 196608:e5ctS2kd5lM8aV3CvV4Ks6PMDZnZ9W3kL708m8x6p+8ySYNrQb05:gcE2kd5lM83BPmnygp56pWZk05
TLSH
T164A633A07661F522EF5500F08935A9AC053A6A343355E4EFBB5F3AD60D280E16F72D73
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-19_be653ab66a72e21f516118bc38c70252_amadey_elex_luca-stealer_njrat_remcos_smoke-loader

File Explorer

2026-07-19_be653ab66a72e21f516118bc38c70252_amadey_elex_luca-stealer_njrat_remcos_smoke-loader

.exe 9.2MB

2026-07-19_be653ab66a72e21f516118bc38c70252_amadey_elex_luca-stealer_njrat_remcos_smoke-loader

IMPHASH 7d7271b13182b837d7d6f20b377e203b
SHA256 d9ad60868f30094aed31395eaf077a7c0615b62b1442083858a21a6768c72d97
MD5 be653ab66a72e21f516118bc38c70252
SHA1 1c3f5ef9496edb6a4f828a15ca2fe2be44d227d2
SHA512 0bc77a391a1db2aac97e6b05516ebe5d37fe56f77f00424c5661e37a449eee6b7fe1b2d2683bfe935e66ce9aa5c0b12d3f59f648f41d64dcdfd0779ab39270c3
SSDEEP 196608:e5ctS2kd5lM8aV3CvV4Ks6PMDZnZ9W3kL708m8x6p+8ySYNrQb05:gcE2kd5lM83BPmnygp56pWZk05
TLSH
T164A633A07661F522EF5500F08935A9AC053A6A343355E4EFBB5F3AD60D280E16F72D73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

CreatePropertySheetPageW CreatePropertySheetPageA

kernel32

QueryPerformanceCounter GetTickCount CreateWaitableTimerW GetLastError WideCharToMultiByte MultiByteToWideChar AreFileApisANSI LoadLibraryExW LoadLibraryW GetModuleFileNameA GetModuleFileNameW FormatMessageA FormatMessageW LocalFree GetSystemDirectoryW CreateFileW SetFileTime CloseHandle SetFileAttributesA SetFileAttributesW RemoveDirectoryA RemoveDirectoryW CreateDirectoryA CreateDirectoryW DeleteFileA DeleteFileW SetCurrentDirectoryA SetCurrentDirectoryW GetCurrentDirectoryA GetCurrentDirectoryW GetTempPathA GetTempPathW GetFileInformationByHandle GetStdHandle FindClose FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW GetModuleHandleA GetFileAttributesA GetFileAttributesW CreateFileA GetFileSize SetFilePointer ReadFile WriteFile SetEndOfFile GetCurrentProcess SetLastError GetCurrentThreadId GlobalMemoryStatus GetSystemTimeAsFileTime Sleep GetVersion IsProcessorFeaturePresent ReleaseSemaphore InitializeCriticalSection WaitForSingleObject SetEvent ResetEvent CreateSemaphoreA CreateEventA GetVersionExA GetModuleHandleW CreateProcessA SetFilePointerEx HeapSize GetConsoleMode GetConsoleCP FlushFileBuffers SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP WriteConsoleW IsValidCodePage FindFirstFileExA GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW HeapReAlloc GetACP ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount GetCurrentProcessId LeaveCriticalSection EnterCriticalSection DeleteCriticalSection IsBadReadPtr FreeLibrary GetProcAddress HeapAlloc GetNativeSystemInfo LoadLibraryA VirtualAlloc GetSystemInfo VirtualFree HeapFree GetProcessAffinityMask RaiseException RtlUnwind GetCPInfo LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx GetStringTypeW InitializeSListHead GetStartupInfoW IsDebuggerPresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter

user32

DestroyWindow LoadIconA EndDialog KillTimer SetTimer PostMessageA SendMessageA MessageBoxW SetWindowTextW SetWindowTextA LoadStringW LoadStringA DialogBoxParamW DialogBoxParamA GetDlgItem GetWindowLongA SetWindowLongA ShowWindow CharUpperA CharUpperW SetScrollInfo GetScrollRange EnableScrollBar

gdi32

GetClipRgn RemoveFontResourceExA EnumFontFamiliesExW CancelDC GetPixel CreateDIBitmap GetPath GetWinMetaFileBits SetBkMode ChoosePixelFormat DeleteColorSpace Chord GetViewportOrgEx GetTextFaceA

comdlg32

GetFileTitleA

oleaut32

VariantClear SysAllocStringLen SysStringLen VarR8FromI4 VarR4FromI2 VarR4FromUI4 SafeArrayUnaccessData VarI4FromUI1 VarBoolFromI1 VarUI2FromUI4 GetErrorInfo VarI2FromR8 VarR4FromStr VarR8FromBool VarUI4FromUI8 VarUI4FromStr

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-19_be653ab66a72e21f516118bc38c70252_amadey_elex_luca-stealer_njrat_remcos_smoke-loader

comctl32

kernel32

user32

gdi32

comdlg32

oleaut32

generic