General
- Target 2026-07-20_cd9f933a87a6de7356178e7782e348d4_amadey_elex_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- Sample260720-vghv8aav9v
- SHA256 d7cd1d271d4e193779e7581f0dbdfc60f79ae1a240c94f6d4ff9865d7cf5b9f7
- MD5 cd9f933a87a6de7356178e7782e348d4
- SHA1 478fc67753ad227c5c8ca7d1efb7d7333cc09d58
- SHA512 093cef2de378dd57ce5d6686518779337dca43f25befd08473351db49359dd8366104ce03c608d6146f1d8b853f37cd3123433f2ef913babe8a498c6193c6c9a
- SSDEEP 24576:K+8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+Lw:EKjKWQc2b1FVgbjrjxPe1pbPSQm1Floj
- TLSH T14265230172E18074F5F22E30A970D6B54BBEFD746931AA0B13991E2D6F38981E935B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_cd9f933a87a6de7356178e7782e348d4_amadey_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_cd9f933a87a6de7356178e7782e348d4_amadey_elex_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- SHA256 d7cd1d271d4e193779e7581f0dbdfc60f79ae1a240c94f6d4ff9865d7cf5b9f7
- MD5 cd9f933a87a6de7356178e7782e348d4
- SHA1 478fc67753ad227c5c8ca7d1efb7d7333cc09d58
- SHA512 093cef2de378dd57ce5d6686518779337dca43f25befd08473351db49359dd8366104ce03c608d6146f1d8b853f37cd3123433f2ef913babe8a498c6193c6c9a
- SSDEEP 24576:K+8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+Lw:EKjKWQc2b1FVgbjrjxPe1pbPSQm1Floj
- TLSH T14265230172E18074F5F22E30A970D6B54BBEFD746931AA0B13991E2D6F38981E935B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.