General

  • Target
    2026-07-31_1a869f9385ae10f07f0d5216210cf34d_amadey_elex_luca-stealer_mespinoza_njrat_smoke-loader
  • Size 1.1MB
  • Sample260731-1s85fasbkd
  • SHA256 66925d3c725e0b81bb0f53c91c886fe513c4039b7250e8fb426300c851a910ba
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-31_1a869f9385ae10f07f0d5216210cf34d_amadey_elex_luca-stealer_mespinoza_njrat_smoke-loader
    • Size 1.1MB
    • SHA256 66925d3c725e0b81bb0f53c91c886fe513c4039b7250e8fb426300c851a910ba
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Rhadamanthys Payload

    • Family: Rhadamanthys

      Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    • Suspicious use of NtCreateUserProcessOtherParentProcess

MITRE ATT&CK Enterprise v16

Tasks