General
- Target 2026-07-31_c3be68e37ac5f646664d5e430bdcd2e8_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 787KB
- Sample260731-c2t5wabd67
- SHA256 e33f71bf6721d09b887365d86b0c4f2a7fdf715bdb190c9c46fa7733acafe663
- MD5 c3be68e37ac5f646664d5e430bdcd2e8
- SHA1 0d68cdeb790930ac134e65cc69324de175efc432
- SHA512 cc37539b268aea93f3550317db94f3a590e1236bb8c0263a8a350e0393b0bac8cf18c7fd2edab4092517a801a97253472d65d8ca5330d2ee2abe21e79a636c9a
- SSDEEP 24576:orwr+e4rvxLYzRTTxH2qjYXzGAiGFn4w7z:F14rJLgFYXLFj
- TLSH T15A05020271D280B9E0B746380DE5AE71A9BDBC350A25DE7F23D40B2A6FB45C1D625E73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_c3be68e37ac5f646664d5e430bdcd2e8_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_c3be68e37ac5f646664d5e430bdcd2e8_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_c3be68e37ac5f646664d5e430bdcd2e8_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 787KB
- SHA256 e33f71bf6721d09b887365d86b0c4f2a7fdf715bdb190c9c46fa7733acafe663
- MD5 c3be68e37ac5f646664d5e430bdcd2e8
- SHA1 0d68cdeb790930ac134e65cc69324de175efc432
- SHA512 cc37539b268aea93f3550317db94f3a590e1236bb8c0263a8a350e0393b0bac8cf18c7fd2edab4092517a801a97253472d65d8ca5330d2ee2abe21e79a636c9a
- SSDEEP 24576:orwr+e4rvxLYzRTTxH2qjYXzGAiGFn4w7z:F14rJLgFYXLFj
- TLSH T15A05020271D280B9E0B746380DE5AE71A9BDBC350A25DE7F23D40B2A6FB45C1D625E73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1