General
- Target 2026-08-04_60aaf9ccc723ec0f4d2572a60beecf48_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 859KB
- Sample260804-hwvgcatdrb
- SHA256 7f76276f29d79217150ba29a6c6429376e42edbea9a76416d59cf8a73de7aec1
- MD5 60aaf9ccc723ec0f4d2572a60beecf48
- SHA1 7c6936cc0d407e934c692b0038b18fb195164bc4
- SHA512 64fd9e1cc4eb308a53cc7d1bea29a264e532959c4b07125ebda27bdf67ac49ce0567f179be2ae050a5f96ca63684b6b5ba0318e67e3d0aecdd32fc34495f6280
- SSDEEP 24576:LxcVyzEw2SrGxaKLxoNv3r82LMe+jnU3F:Ce12Sr+lEIxeUUV
- TLSH T15D15021175A1C876F2B30A354CB8ABB19EFDB9210432C96F13D40AADAE75581E539F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_60aaf9ccc723ec0f4d2572a60beecf48_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_60aaf9ccc723ec0f4d2572a60beecf48_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 859KB
- SHA256 7f76276f29d79217150ba29a6c6429376e42edbea9a76416d59cf8a73de7aec1
- MD5 60aaf9ccc723ec0f4d2572a60beecf48
- SHA1 7c6936cc0d407e934c692b0038b18fb195164bc4
- SHA512 64fd9e1cc4eb308a53cc7d1bea29a264e532959c4b07125ebda27bdf67ac49ce0567f179be2ae050a5f96ca63684b6b5ba0318e67e3d0aecdd32fc34495f6280
- SSDEEP 24576:LxcVyzEw2SrGxaKLxoNv3r82LMe+jnU3F:Ce12Sr+lEIxeUUV
- TLSH T15D15021175A1C876F2B30A354CB8ABB19EFDB9210432C96F13D40AADAE75581E539F33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1