Overview

overview

7

Static

static

3

2026-07-22...op.exe

windows10-2004-x64

7

2026-07-22...op.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    22/07/2026, 17:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-22_bbbf97e0ea6d7b0a8b0ee68f6a39dfbc_amadey_elex_lumma-stealer_rhadamanthys_smoke-loader_stop.exe
  • Size 49.2MB
  • Sample260722-vnv45azbkh
  • SHA256 3228e9977a379927013422db129fe1bef041b70235064d8cf05e98d7c5f0eb1b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoverytrojan

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 19 IoCs
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
    defense_evasiontrojan
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-22_bbbf97e0ea6d7b0a8b0ee68f6a39dfbc_amadey_elex_lumma-stealer_rhadamanthys_smoke-loader_stop.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-22_bbbf97e0ea6d7b0a8b0ee68f6a39dfbc_amadey_elex_lumma-stealer_rhadamanthys_smoke-loader_stop.exe"
    1⤵
    • Checks whether UAC is enabled
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3732
    • C:\Users\Admin\AppData\Local\Temp\0e599d30\2026-07-22_bbbf97e0ea6d7b0a8b0ee68f6a39dfbc_amadey_elex_lumma-stealer_rhadamanthys_smoke-loader_stop.exe
      "C:\Users\Admin\AppData\Local\Temp\0e599d30\2026-07-22_bbbf97e0ea6d7b0a8b0ee68f6a39dfbc_amadey_elex_lumma-stealer_rhadamanthys_smoke-loader_stop.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:1776

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        2026-07-22_bbbf97e0ea6d7b0a8b0ee68f6a39dfbc_amadey_elex_lumma-stealer_rhadamanthys_smoke-loader_stop.exe
        • Path C:\Users\Admin\AppData\Local\Temp\0e599d30\2026-07-22_bbbf97e0ea6d7b0a8b0ee68f6a39dfbc_amadey_elex_lumma-stealer_rhadamanthys_smoke-loader_stop.exe
        • Size 48.9MB
        • SHA256 355886667661620fb374d4c2e5f22068afedd849421d6715b4dfe6e1cc749ba5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InstallOptions.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nscA262.tmp\InstallOptions.dll
        • Size 15KB
        • SHA256 fa8de036b1d9bb06be383a82041966c73473fc8382d041fb5c1758f991afeae7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        NDPlugIn.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nscA262.tmp\NDPlugIn.dll
        • Size 78KB
        • SHA256 4aa390a490252bfeb028cc2a8af6810f0af405f1fc61847fa9374a0cd650b935
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ioSpecial.ini
        • Path C:\Users\Admin\AppData\Local\Temp\nscA262.tmp\ioSpecial.ini
        • Size 1KB
        • SHA256 dd4808496b8fd6ff8c2d5c2fd00f42fec03de816e6fa73fda156671efb680a7d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ioSpecial.ini
        • Path C:\Users\Admin\AppData\Local\Temp\nscA262.tmp\ioSpecial.ini
        • Size 1KB
        • SHA256 4f19e2780067998187d3072cd6fa9796dc3cbba8d28f03f660debbc57d638f1e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ntbapiW_1_0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nscA262.tmp\ntbapiW_1_0.dll
        • Size 115KB
        • SHA256 878e2705983c8bbec93f97a1ca1c4be90b67ab5ddd243e7122b305de1adf2c07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download