2026-07-21_f6fc5315a7abaee776baa5f70e2ab6b1_amadey_elex_luca-stealer_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-21_f6fc5315a7abaee776baa5f70e2ab6b1_amadey_elex_luca-stealer_njrat_smoke-loader
Size 3.1MB
Sample260721-tvmkwsem8x
SHA256 787e2fde10b44ffd0edc4936e51cffca942843f65ff36748d26980031490fd3c
MD5 f6fc5315a7abaee776baa5f70e2ab6b1
SHA1 bbe74e89ec63fdf50eb69335919075de148f74ba
SHA512 e5ab07207a2d4ed234e538efa01d15c55ff26d706bb243f66bb1d75bd4422c09e8c7dfa0bd1240cb775e5cf33024fd84ef233a7936423741bc95895d331c497b
SSDEEP 49152:BnFJbyTmtE33N0VHeZywsQ9MsXJuoEmFT9qAjmQQn9QASlWEIk/kz5V8U1:BnmTmSeydjmQsvSUgk7
TLSH
T1C3E5022372614072D0E14A35C91BBFAB36B97A304B01AFF773D81AD95E601D2A973D93
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-21_f6fc5315a7abaee776baa5f70e2ab6b1_amadey_elex_luca-stealer_njrat_smoke-loader

File Explorer

2026-07-21_f6fc5315a7abaee776baa5f70e2ab6b1_amadey_elex_luca-stealer_njrat_smoke-loader

.exe 3.1MB

2026-07-21_f6fc5315a7abaee776baa5f70e2ab6b1_amadey_elex_luca-stealer_njrat_smoke-loader

IMPHASH d7af2e8875c5ede7c1a272f1e29beda5
SHA256 787e2fde10b44ffd0edc4936e51cffca942843f65ff36748d26980031490fd3c
MD5 f6fc5315a7abaee776baa5f70e2ab6b1
SHA1 bbe74e89ec63fdf50eb69335919075de148f74ba
SHA512 e5ab07207a2d4ed234e538efa01d15c55ff26d706bb243f66bb1d75bd4422c09e8c7dfa0bd1240cb775e5cf33024fd84ef233a7936423741bc95895d331c497b
SSDEEP 49152:BnFJbyTmtE33N0VHeZywsQ9MsXJuoEmFT9qAjmQQn9QASlWEIk/kz5V8U1:BnmTmSeydjmQsvSUgk7
TLSH
T1C3E5022372614072D0E14A35C91BBFAB36B97A304B01AFF773D81AD95E601D2A973D93
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

371745

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

QueryPerformanceCounter Process32First WriteProcessMemory SetLastError VirtualFree SetConsoleTitleA GetHandleInformation GetCurrentProcess VirtualAlloc TerminateProcess GetVolumeInformationA WaitForSingleObject OpenProcess CreateToolhelp32Snapshot Sleep GetLastError K32GetProcessMemoryInfo Process32Next CloseHandle GetSystemInfo CreateThread VirtualProtectEx VirtualAllocEx ExitProcess ReadProcessMemory GetConsoleWindow VirtualQueryEx ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation GetThreadPriority SetThreadPriority SignalObjectAndWait CreateTimerQueue SetEndOfFile WriteConsoleW HeapSize FreeLibrary HeapReAlloc SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage GlobalAlloc FindFirstFileExW FindClose GetFileAttributesExW CreateProcessW GetExitCodeProcess ReadConsoleInputW SetConsoleMode CreateFileW GetFileSizeEx GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale HeapFree HeapAlloc GetFileType ReadConsoleW GetConsoleMode SetFilePointerEx FreeLibraryAndExitThread GetProcAddress QueryPerformanceFrequency LoadLibraryA ExitThread GetCommandLineW GetModuleHandleA GlobalUnlock WideCharToMultiByte GlobalLock GlobalFree LoadLibraryW UnregisterWaitEx QueryDepthSList InterlockedPopEntrySList ReleaseSemaphore VirtualProtect GetVersionExW GetThreadTimes UnregisterWait GetCommandLineA DeleteTimerQueueTimer WriteFile GetStdHandle RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetModuleFileNameW GetConsoleCP GetModuleHandleExW ReadFile GetNumaHighestNodeNumber FindNextFileW MultiByteToWideChar EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead TryEnterCriticalSection DuplicateHandle SwitchToThread GetCurrentThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetTickCount EncodePointer DecodePointer CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo RtlUnwind RaiseException InterlockedPushEntrySList InterlockedFlushSList LoadLibraryExW

user32

LoadIconA SetClipboardData GetClipboardData EmptyClipboard OpenClipboard GetCursorPos SetCursorPos DispatchMessageA GetWindowRect DestroyWindow SetWindowPos GetSystemMetrics ShowWindow GetAsyncKeyState SetWindowLongA GetWindowLongA SetWindowDisplayAffinity MessageBoxA MoveWindow DefWindowProcA CreateWindowExA SetLayeredWindowAttributes TranslateMessage GetClientRect PeekMessageA GetDesktopWindow FindWindowA RegisterClassExA UpdateWindow GetKeyState LoadCursorA ScreenToClient ClientToScreen GetForegroundWindow SetCursor CloseClipboard

imm32

ImmAssociateContextEx ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext ImmGetContext

dwmapi

DwmExtendFrameIntoClientArea

d3dx9_43

D3DXVec3Project

d3d9

Direct3DCreate9Ex

dbghelp

ImageDirectoryEntryToData

wininet

InternetReadFile InternetOpenUrlA InternetOpenA

ws2_32

inet_ntoa WSAStartup gethostbyname WSAGetLastError

crypt32

CryptBinaryToStringA

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-21_f6fc5315a7abaee776baa5f70e2ab6b1_amadey_elex_luca-stealer_njrat_smoke-loader

kernel32

user32

imm32

dwmapi

d3dx9_43

d3d9

dbghelp

wininet

ws2_32

crypt32

generic