General
- Target 2026-08-04_6518c549e5dfe54f37cf3458c25aef1d_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 859KB
- Sample260804-hs8jsseh22
- SHA256 933a3c3edec8bd6885281fb2f71531535c10dbbc3e1c2a4a0ddb3b7a6e242786
- MD5 6518c549e5dfe54f37cf3458c25aef1d
- SHA1 600e2592639a77f5f4f53d08331ccdd8580939ec
- SHA512 4175b17f0e3acf8e090890bae5631fd61376a71b793e7d9f773cc0180c593ad7f4c97483712a9b65aab78b24395a32a86b36189e8a436e0cfe50b20664c94575
- SSDEEP 24576:LxcVyzEd2SrGxcT7Jckdwi6i9bNrqq4E41WFpW3oRos:Ceg2Sr+O7Jckdwi3N7+WTW3
- TLSH T1FB15020175E58877E2B305324DB8AAB19AFD7D221831DE2F13D41A5D9E35680D63AF33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_6518c549e5dfe54f37cf3458c25aef1d_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_6518c549e5dfe54f37cf3458c25aef1d_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 859KB
- SHA256 933a3c3edec8bd6885281fb2f71531535c10dbbc3e1c2a4a0ddb3b7a6e242786
- MD5 6518c549e5dfe54f37cf3458c25aef1d
- SHA1 600e2592639a77f5f4f53d08331ccdd8580939ec
- SHA512 4175b17f0e3acf8e090890bae5631fd61376a71b793e7d9f773cc0180c593ad7f4c97483712a9b65aab78b24395a32a86b36189e8a436e0cfe50b20664c94575
- SSDEEP 24576:LxcVyzEd2SrGxcT7Jckdwi6i9bNrqq4E41WFpW3oRos:Ceg2Sr+O7Jckdwi3N7+WTW3
- TLSH T1FB15020175E58877E2B305324DB8AAB19AFD7D221831DE2F13D41A5D9E35680D63AF33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1