General
- Target 2026-07-21_6228b3169db666430bbd639804c8a941_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 787KB
- Sample260721-c5f3eset6w
- SHA256 72be62c68e015ec5642cf3a3393c6b4a3581d3577eae76d4a6961e6ba27cc4e7
- MD5 6228b3169db666430bbd639804c8a941
- SHA1 b12b950973652910ff80b591f1d03ab64f83fb7d
- SHA512 058e3ad33ba6f2426965ac2269d5829123c6e4a2f0be830e14a098ee58ff45ba6b256538215ed9f9717cd5c4128049b417938ffc37cfafff82c6ead83c0f7b59
- SSDEEP 12288:nr5A62A+xy4rvx+aFMy2Oqi2U9y3+HqFijRXeR4JCQV/qD8PmZ8AmG93:nr5r+I4rvxLyyRW+HcitzVYb9
- TLSH T1C405010275E2C4B1E0B2093049F5AA728ABDFD744A349E7F23D8573D1F751C1AA25AB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_6228b3169db666430bbd639804c8a941_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_6228b3169db666430bbd639804c8a941_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 787KB
- SHA256 72be62c68e015ec5642cf3a3393c6b4a3581d3577eae76d4a6961e6ba27cc4e7
- MD5 6228b3169db666430bbd639804c8a941
- SHA1 b12b950973652910ff80b591f1d03ab64f83fb7d
- SHA512 058e3ad33ba6f2426965ac2269d5829123c6e4a2f0be830e14a098ee58ff45ba6b256538215ed9f9717cd5c4128049b417938ffc37cfafff82c6ead83c0f7b59
- SSDEEP 12288:nr5A62A+xy4rvx+aFMy2Oqi2U9y3+HqFijRXeR4JCQV/qD8PmZ8AmG93:nr5r+I4rvxLyyRW+HcitzVYb9
- TLSH T1C405010275E2C4B1E0B2093049F5AA728ABDFD744A349E7F23D8573D1F751C1AA25AB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1