2026-07-30_cc4b7e7f108e7d48ea247c08456edeb0_amadey_elex_luca-stealer_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-30_cc4b7e7f108e7d48ea247c08456edeb0_amadey_elex_luca-stealer_njrat_smoke-loader
Size 1.5MB
Sample260730-xtncksyvhs
SHA256 5ae470fc893e43b326414581c8b63b51f010562ba94429146876f6ee70f2e161
MD5 cc4b7e7f108e7d48ea247c08456edeb0
SHA1 ec1fb8bdbb8966ba742d6d0c4197e84fb835d418
SHA512 e423c7dfe8f2cffb6f22faaa28db9bf79e6003f4ab1b9156e8a60a3144c0954be7b8512d57f269adb82cc57c69d2b02d98170f4b013d07b11837abbe44afca04
SSDEEP 24576:faKTk7EpEzsH4BDzzsrj8esAQnH6LRgy7iBY5/ryIDxXv:g7mEzsYJOj9sAQH61tySHD
TLSH
T12765D02039C19572DDE210B547FCB926119DE8700B354ACF62C857EEEA206D26F37EA7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_cc4b7e7f108e7d48ea247c08456edeb0_amadey_elex_luca-stealer_njrat_smoke-loader

File Explorer

2026-07-30_cc4b7e7f108e7d48ea247c08456edeb0_amadey_elex_luca-stealer_njrat_smoke-loader

.exe 1.5MB

2026-07-30_cc4b7e7f108e7d48ea247c08456edeb0_amadey_elex_luca-stealer_njrat_smoke-loader

IMPHASH e030d373be57ed2857b6eb03caef2fa8
SHA256 5ae470fc893e43b326414581c8b63b51f010562ba94429146876f6ee70f2e161
MD5 cc4b7e7f108e7d48ea247c08456edeb0
SHA1 ec1fb8bdbb8966ba742d6d0c4197e84fb835d418
SHA512 e423c7dfe8f2cffb6f22faaa28db9bf79e6003f4ab1b9156e8a60a3144c0954be7b8512d57f269adb82cc57c69d2b02d98170f4b013d07b11837abbe44afca04
SSDEEP 24576:faKTk7EpEzsH4BDzzsrj8esAQnH6LRgy7iBY5/ryIDxXv:g7mEzsYJOj9sAQH61tySHD
TLSH
T12765D02039C19572DDE210B547FCB926119DE8700B354ACF62C857EEEA206D26F37EA7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12596

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\projects\rcedit\Default\rcedit.pdb

kernel32

DecodePointer FreeResource LockResource FreeLibrary HeapDestroy HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap RaiseException GetLastError InitializeCriticalSectionAndSpinCount DeleteCriticalSection LoadResource SizeofResource GetFileSize ReadFile SetFilePointer CloseHandle LoadLibraryExW FindResourceW FindResourceExW EnumResourceNamesW EnumResourceLanguagesW BeginUpdateResourceW UpdateResourceW EndUpdateResourceW CreateFileW WideCharToMultiByte MultiByteToWideChar GetStringTypeW FormatMessageW EnterCriticalSection LeaveCriticalSection EncodePointer SetLastError CreateEventW SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount GetModuleHandleW GetProcAddress CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo SetEvent ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead OutputDebugStringW ReadConsoleW GetCurrentDirectoryW SetCurrentDirectoryW RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetFullPathNameW GetFullPathNameA GetStdHandle GetFileType GetModuleFileNameA GetModuleFileNameW GetModuleHandleExW WriteConsoleW ExitProcess WriteFile GetCommandLineA GetCommandLineW GetACP GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetCurrentThread GetDriveTypeW FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx OutputDebugStringA CreateThread SetConsoleCtrlHandler GetTimeZoneInformation FindClose FindFirstFileExA FindFirstFileExW FindNextFileA FindNextFileW IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetEnvironmentVariableW SetStdHandle SetEndOfFile

user32

UnregisterClassW

Name

.text

Size

750KB

Virtual Size

750KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

138KB

Virtual Size

138KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

1024B

Virtual Size

777B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

260B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

592KB

Virtual Size

596KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_cc4b7e7f108e7d48ea247c08456edeb0_amadey_elex_luca-stealer_njrat_smoke-loader

kernel32

user32

generic