Overview

overview

4

Static

static

1

2026-08-03...er.exe

windows10-2004-x64

4

2026-08-03...er.exe

windows11-ltsc_2024-x64

4

Analysis

  • max time kernel
    148s
  • max time network
    144s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    04/08/2026, 09:39

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-03_cd2505f031d6e51fbfdfddb5b268d95d_amadey_elex_luca-stealer_njrat_smoke-loader.exe
  • Size 2.1MB
  • Sample260804-lmx3naswe1
  • SHA256 6b64f97bb67054f66f743f3a0a6361f0c83b8c5817ef56426cd2ead6f6f61e34
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
discovery

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 27 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 6 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-03_cd2505f031d6e51fbfdfddb5b268d95d_amadey_elex_luca-stealer_njrat_smoke-loader.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-03_cd2505f031d6e51fbfdfddb5b268d95d_amadey_elex_luca-stealer_njrat_smoke-loader.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:5012
    • C:\Users\Admin\AppData\Local\Temp\IIFB627.tmp\setup.exe
      C:\Users\Admin\AppData\Local\Temp\IIFB627.tmp\setup.exe
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Checks SCSI registry key(s)
      PID:3888

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        setup.exe
        • Path C:\Users\Admin\AppData\Local\Temp\IIFB627.tmp\setup.exe
        • Size 2.2MB
        • SHA256 6bd829a9337fae77d4f15be19da9dff287eeaa90257c11f239c749b3e22b234f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\ar-SA\IntelCommon.dll
        • Size 15KB
        • SHA256 9dcc12cf4697146628f3bf6fffd0a3af988551447d4b4cff5c9d6dc3c232b79a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\cs-CZ\IntelCommon.dll
        • Size 16KB
        • SHA256 4843117186aa2c347e9dce6f78d4a4b1ffe77eed8b5b8f3c62af2db631d5c40a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\da-DK\IntelCommon.dll
        • Size 16KB
        • SHA256 87b349ebf9fd8c107daac7c54204cb827330660d37b53d06e9b2f387622503fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        License.txt
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\da-DK\License.txt
        • Size 35KB
        • SHA256 e4dee3b0f026755f34b556e3a57fd0ff173c442a9628f24a9d0a4cf14d361765
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\de-DE\IntelCommon.dll
        • Size 17KB
        • SHA256 762bdb9d4d98bf6fe1417e67610ede34ad0a532991542433785d9d279b096ac1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\el-GR\IntelCommon.dll
        • Size 18KB
        • SHA256 2f28aae16e89b3ddd311ccfb5de7d60c7ec5afd074510d4df498c704f62f3807
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\en-US\IntelCommon.dll
        • Size 16KB
        • SHA256 ab3ea369a5083b4354e8c978a3f6a202ac8d2f01ff4ac323509cab35e6332674
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\es-ES\IntelCommon.dll
        • Size 17KB
        • SHA256 0c13381abfc382a1d83f9e207e555ebf77eba35a078807bed0f6efc8f608afc5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\fi-FI\IntelCommon.dll
        • Size 16KB
        • SHA256 15bc042d61af139e46222775850dc32aceae92d90bff54036b137eef356eb308
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\fr-FR\IntelCommon.dll
        • Size 18KB
        • SHA256 34c95716b01ffe5fcd094a583bce2f0c0b38e04927bea0226102656c20ea099d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\he-IL\IntelCommon.dll
        • Size 14KB
        • SHA256 2ae923043cb58e495444948f812ec94155acb5416ecbdfb167ef18047d372032
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\hu-HU\IntelCommon.dll
        • Size 16KB
        • SHA256 ed5dcfec16018b3b094537d624b0001809eea35bdd79deb186dcb09f5d3f3da4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\it-IT\IntelCommon.dll
        • Size 17KB
        • SHA256 b41425d1bbaa17adfa90cb960f8a991f9606df6da6ef4d3a3257aa6b4f2b45dc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\ja-JP\IntelCommon.dll
        • Size 12KB
        • SHA256 00d13b036e74ba1844a8a0f403361e52d703f0e8ab41f873e5c72f25180c5d37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\ko-KR\IntelCommon.dll
        • Size 12KB
        • SHA256 eee2b03e011e02794e67f43dfdf51e4653d9b504ff90985efe178bd977d012f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\nb-NO\IntelCommon.dll
        • Size 16KB
        • SHA256 52abfc18c356b0dc681cda1eee88f0f2f81a4bcde2f4c4810c395ee7cb24343c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\nl-NL\IntelCommon.dll
        • Size 17KB
        • SHA256 ab7881d05b6ca12b8d16f67fded3d18dda24ecbfa084a4053a88b88d338d6ad5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\pl-PL\IntelCommon.dll
        • Size 16KB
        • SHA256 b01b305ae3ed134ed3caa450d0dfffca840673979d555239acb874710ba4ff9b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\pt-BR\IntelCommon.dll
        • Size 17KB
        • SHA256 cf618d0fecd88352d262ed1708f8cc8c7a2ee691c11797f924c1a64679d5e814
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\pt-PT\IntelCommon.dll
        • Size 17KB
        • SHA256 ea64f676a5da7dddd87254bad41253166cbb56066cee1671f17dda7c77bc4128
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\ru-RU\IntelCommon.dll
        • Size 16KB
        • SHA256 49c985b0da15ec07a00dc9f35e64a50c50a8192396929585c5c43847b63c2fd2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\sk-SK\IntelCommon.dll
        • Size 17KB
        • SHA256 581d37bcbf6237f315bb14b6accaeff2b2d1837f49b9aee596f1702b53308fe6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\sl-SI\IntelCommon.dll
        • Size 16KB
        • SHA256 9c6507fa4d52fb553e70bc8d15203dc7586fd6fb28e7fd9998de94573e5a8cef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\sv-SE\IntelCommon.dll
        • Size 16KB
        • SHA256 dbf75fbbf1c643a218e99769a265c52159414ff07ccef9ef8d9739a1e1002e36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\th-TH\IntelCommon.dll
        • Size 15KB
        • SHA256 3bde78806e1216f5f8578863eb7b131ab6c29422dc2ca472f4dbc074cca4c97c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\tr-TR\IntelCommon.dll
        • Size 16KB
        • SHA256 e5330a38a8c5643b5850c9e77a4006cb3d443b46e105e9fe015ea8adfcf774d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\zh-CN\IntelCommon.dll
        • Size 10KB
        • SHA256 720b8c0acd1e54f0aa8bb5fe581859a0bfcb6e90c4cb99702210e087e9fa4f19
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelCommon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\IIFBA2E.tmp\zh-TW\IntelCommon.dll
        • Size 10KB
        • SHA256 3ecbc68c1d442af25c6fd1446200439851fd47734a4d12187fd89410344fbf37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IntelSerialIO.log
        • Path C:\Users\Admin\Intel\Logs\IntelSerialIO.log
        • Size 5KB
        • SHA256 c9a32d43e4de4b2ec518234fe0df103971877cf513463c65312688a9897acf38
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download