General
- Target 2026-08-01_0af96b0b5f14b4716c80c2a1ac427943_amadey_elex_luca-stealer_njrat_smoke-loader_stop
- Size 9.7MB
- Sample260802-bra4ksbl41
- SHA256 ecf27acfde4c3c2a8d817333aec3ec902287875629b6377b8d8d9162d0992f17
- MD5 0af96b0b5f14b4716c80c2a1ac427943
- SHA1 0744a9e3d07dc5c20a06970f7b0517820435012c
- SHA512 3ac667f3b37159a53fa34e9898d6a3ea6c5c458690800d392a82309511a6a03da1972345fee98dd20dd20532af7301689c4b16b3f3da5440a06bf2f438d98c88
- SSDEEP 196608:j/mplkHbAZH0QuwlVfrXsu2TdlYjEbSAi/wTyTtmAAR5wjgIHVP4:j/vvQuwlVfjsuSojEbSjw+cPrwjxHV
- TLSH T137A612E09419CB36EDC249BDB2F7F19958613E027F1856C71C8A277C45338C376AEA29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_0af96b0b5f14b4716c80c2a1ac427943_amadey_elex_luca-stealer_njrat_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_0af96b0b5f14b4716c80c2a1ac427943_amadey_elex_luca-stealer_njrat_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_0af96b0b5f14b4716c80c2a1ac427943_amadey_elex_luca-stealer_njrat_smoke-loader_stop
- Size 9.7MB
- SHA256 ecf27acfde4c3c2a8d817333aec3ec902287875629b6377b8d8d9162d0992f17
- MD5 0af96b0b5f14b4716c80c2a1ac427943
- SHA1 0744a9e3d07dc5c20a06970f7b0517820435012c
- SHA512 3ac667f3b37159a53fa34e9898d6a3ea6c5c458690800d392a82309511a6a03da1972345fee98dd20dd20532af7301689c4b16b3f3da5440a06bf2f438d98c88
- SSDEEP 196608:j/mplkHbAZH0QuwlVfrXsu2TdlYjEbSAi/wTyTtmAAR5wjgIHVP4:j/vvQuwlVfjsuSojEbSjw+cPrwjxHV
- TLSH T137A612E09419CB36EDC249BDB2F7F19958613E027F1856C71C8A277C45338C376AEA29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL