General
- Target 2026-07-31_b1f12f8c9f4472bddcab304a7c63cb8b_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 787KB
- Sample260731-c5lynssbkb
- SHA256 73daea3fab80fddb23f471f1fcefe9f0adc2d882c999bd510b7b43b6a138cfcc
- MD5 b1f12f8c9f4472bddcab304a7c63cb8b
- SHA1 9ae11fc4acf96b6b98d302c57ef1d028c605043f
- SHA512 3adcfd22e04d440b6f9b7cfee9b2f6746e8551f82fd83f059fce46aabe6552d6f4548a3a6c1abcae40896aeec4457b91d6a04b696d3035c4cc67a899011a1801
- SSDEEP 24576:nr5r+I4rvxLDU63HqBgMyN+TTtvvXzxuiZR:Zr4rJLZXaU+TJvXzxXH
- TLSH T1DB05011171D280B1E0B30D3009F8A9B56ABEB9710E249F7F33E44F2E5F795C1952AA76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_b1f12f8c9f4472bddcab304a7c63cb8b_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_b1f12f8c9f4472bddcab304a7c63cb8b_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_b1f12f8c9f4472bddcab304a7c63cb8b_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 787KB
- SHA256 73daea3fab80fddb23f471f1fcefe9f0adc2d882c999bd510b7b43b6a138cfcc
- MD5 b1f12f8c9f4472bddcab304a7c63cb8b
- SHA1 9ae11fc4acf96b6b98d302c57ef1d028c605043f
- SHA512 3adcfd22e04d440b6f9b7cfee9b2f6746e8551f82fd83f059fce46aabe6552d6f4548a3a6c1abcae40896aeec4457b91d6a04b696d3035c4cc67a899011a1801
- SSDEEP 24576:nr5r+I4rvxLDU63HqBgMyN+TTtvvXzxuiZR:Zr4rJLZXaU+TJvXzxXH
- TLSH T1DB05011171D280B1E0B30D3009F8A9B56ABEB9710E249F7F33E44F2E5F795C1952AA76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1