General
- Target 2026-07-22_30e0709aec804b105f40ceef1ae97537_amadey_elex_luca-stealer_mespinoza_njrat_remcos_smoke-loader
- Size 9.1MB
- Sample260722-wmlpqs1dlb
- SHA256 e647e6df723d4598a0b9362248ae6031b5dbbb84c7bdb5eedb4ac60fb9d987d7
- MD5 30e0709aec804b105f40ceef1ae97537
- SHA1 17a27f8240506d6dedd86b3533ed752b5a656608
- SHA512 b993cb0b757da881803cff01c4c20fcfb27ac7c3f0943e1ecf8757b16f1400908ca3b513c81fc1199eb2098b770f40c62c02a5500430f5ebdda25624146f3fff
- SSDEEP 196608:GT7DEIgP6Xs0qhTI1MU3ytgAe//dGooWiP5dsZ+O+x73/xw:GT7DEC0a1MUitgAe3z+5dsZ+OQ7vxw
- TLSH T196A601C07765F818E75906700836B6F496662A313310D9EAFECB7AC2196C3C5ADF1E36
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_30e0709aec804b105f40ceef1ae97537_amadey_elex_luca-stealer_mespinoza_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_30e0709aec804b105f40ceef1ae97537_amadey_elex_luca-stealer_mespinoza_njrat_remcos_smoke-loader
- Size 9.1MB
- SHA256 e647e6df723d4598a0b9362248ae6031b5dbbb84c7bdb5eedb4ac60fb9d987d7
- MD5 30e0709aec804b105f40ceef1ae97537
- SHA1 17a27f8240506d6dedd86b3533ed752b5a656608
- SHA512 b993cb0b757da881803cff01c4c20fcfb27ac7c3f0943e1ecf8757b16f1400908ca3b513c81fc1199eb2098b770f40c62c02a5500430f5ebdda25624146f3fff
- SSDEEP 196608:GT7DEIgP6Xs0qhTI1MU3ytgAe//dGooWiP5dsZ+O+x73/xw:GT7DEC0a1MUitgAe3z+5dsZ+OQ7vxw
- TLSH T196A601C07765F818E75906700836B6F496662A313310D9EAFECB7AC2196C3C5ADF1E36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.