General
- Target 2026-08-02_12e7794b22a1a5673e28a48b6c2ec284_amadey_elex_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stop
- Size 6.5MB
- Sample260802-1zymaasglc
- SHA256 a185419bbd3f8b45dd90c1ad32d952bd60bf40ed86cb66867feff33b58464a9d
- MD5 12e7794b22a1a5673e28a48b6c2ec284
- SHA1 977035757aa0b77a28e185ca0321717e4021c6c9
- SHA512 e2e25ab2ec056645187c702c0929216611004702e7a82f7c8b266cd50a4fbbe20b4910e86ce4ff36cc9a6cb49465f63cc3fb5902a4270e9f90018094020bc2f8
- SSDEEP 98304:EcRGTJAjoVxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22IS:3GTJSoQeGZF6bUpMBF1p/kjRm4OWi2z
- TLSH T127661216F5648371D033C079C8E2D7BAEA7134920B3486CB5385DB6D2F676E29A3A731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_12e7794b22a1a5673e28a48b6c2ec284_amadey_elex_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_12e7794b22a1a5673e28a48b6c2ec284_amadey_elex_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_12e7794b22a1a5673e28a48b6c2ec284_amadey_elex_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_stop
- Size 6.5MB
- SHA256 a185419bbd3f8b45dd90c1ad32d952bd60bf40ed86cb66867feff33b58464a9d
- MD5 12e7794b22a1a5673e28a48b6c2ec284
- SHA1 977035757aa0b77a28e185ca0321717e4021c6c9
- SHA512 e2e25ab2ec056645187c702c0929216611004702e7a82f7c8b266cd50a4fbbe20b4910e86ce4ff36cc9a6cb49465f63cc3fb5902a4270e9f90018094020bc2f8
- SSDEEP 98304:EcRGTJAjoVxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22IS:3GTJSoQeGZF6bUpMBF1p/kjRm4OWi2z
- TLSH T127661216F5648371D033C079C8E2D7BAEA7134920B3486CB5385DB6D2F676E29A3A731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Drops file in System32 directory