General
- Target 2026-08-01_bc562194b25446ed690d6438f2b90621_amadey_elex_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 6.9MB
- Sample260801-tedytaswez
- SHA256 b5d461956962aff59dde6192bbdd3ccfa259ede9c4e451f7aea6ff45b3d7d0a1
- MD5 bc562194b25446ed690d6438f2b90621
- SHA1 0e27de1cc99a4b42942ca0e3c2c0b51969e759bf
- SHA512 cee996e780d72bbb2454804042feed52dc562aed6b257b47d3c538080e85fa09864f690bd5fe6e82d3d7f1fbe5357922d745374764222d885283c01f787a1185
- SSDEEP 98304:/1pEqJjoOxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBj:tpz9o9eGZF6bUpMBF1p/kjRm4OWi2bx
- TLSH T178761215F9788231D0728075C8E2E66BE9B170817B7CADC703859A7D2EA37D395BB321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_bc562194b25446ed690d6438f2b90621_amadey_elex_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_bc562194b25446ed690d6438f2b90621_amadey_elex_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_bc562194b25446ed690d6438f2b90621_amadey_elex_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 6.9MB
- SHA256 b5d461956962aff59dde6192bbdd3ccfa259ede9c4e451f7aea6ff45b3d7d0a1
- MD5 bc562194b25446ed690d6438f2b90621
- SHA1 0e27de1cc99a4b42942ca0e3c2c0b51969e759bf
- SHA512 cee996e780d72bbb2454804042feed52dc562aed6b257b47d3c538080e85fa09864f690bd5fe6e82d3d7f1fbe5357922d745374764222d885283c01f787a1185
- SSDEEP 98304:/1pEqJjoOxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBj:tpz9o9eGZF6bUpMBF1p/kjRm4OWi2bx
- TLSH T178761215F9788231D0728075C8E2E66BE9B170817B7CADC703859A7D2EA37D395BB321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Drops file in System32 directory