General
- Target 2026-08-03_44ec7a26e9f9c6806a58847e414f0047_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 858KB
- Sample260804-pd1nzazcjb
- SHA256 23d5585854416afe00397f68d87f1f39e4668d6c4f84d35d27b401901912b0d8
- MD5 44ec7a26e9f9c6806a58847e414f0047
- SHA1 6cbfa5185608e6d4852ed294acf2a8f9af967af6
- SHA512 9e38db6c08a4bcebc0ade4366cd2a5d61e7577d9685e8c9d102936d023f484267cf7e884de4fbc551450c945f4805957b1e379f0a5e6ed275a7e7f7811fb925a
- SSDEEP 24576:9xcVyzEw2SrGxgt5t55cI1Ma2WntwfVE3+k+Sy538Q1:sel2Sr+4J5khWtUqXPy538Q1
- TLSH T1B415021275E18872E7B7013249B9AAB55ABDBD210931CE2F13D00EADCE31591D63AF73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_44ec7a26e9f9c6806a58847e414f0047_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_44ec7a26e9f9c6806a58847e414f0047_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_44ec7a26e9f9c6806a58847e414f0047_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 858KB
- SHA256 23d5585854416afe00397f68d87f1f39e4668d6c4f84d35d27b401901912b0d8
- MD5 44ec7a26e9f9c6806a58847e414f0047
- SHA1 6cbfa5185608e6d4852ed294acf2a8f9af967af6
- SHA512 9e38db6c08a4bcebc0ade4366cd2a5d61e7577d9685e8c9d102936d023f484267cf7e884de4fbc551450c945f4805957b1e379f0a5e6ed275a7e7f7811fb925a
- SSDEEP 24576:9xcVyzEw2SrGxgt5t55cI1Ma2WntwfVE3+k+Sy538Q1:sel2Sr+4J5khWtUqXPy538Q1
- TLSH T1B415021275E18872E7B7013249B9AAB55ABDBD210931CE2F13D00EADCE31591D63AF73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1