General
- Target 2026-08-06_82de08906a4bcf48c1931393d9084747_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 787KB
- Sample260806-bt9pxs1apd
- SHA256 9e347c12f97d03fc62e2de7b92954fdfb27202a7fea1480a71641aaae97e3407
- MD5 82de08906a4bcf48c1931393d9084747
- SHA1 a6719f0c0ccc1d09d35470d545fe0bac244a1245
- SHA512 953f5b7179eb97c51e9d9088a3cc92d21c3a27a4d06825dcdbdc4ccb0b4ab7aff42eea8a9f122d22e7f028e47ded5a9f3c977673315d795a126479a9f9e32861
- SSDEEP 24576:orKr+U4rvxLEOpayI7qWwfMaCGRdd3aEHX:bf4rJL7paZtGRddKEHX
- TLSH T15705021274E380F2E2F516350AF99A714AFDB8310A208E6F23D4576E5F752C2D626E73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_82de08906a4bcf48c1931393d9084747_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_82de08906a4bcf48c1931393d9084747_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_82de08906a4bcf48c1931393d9084747_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 787KB
- SHA256 9e347c12f97d03fc62e2de7b92954fdfb27202a7fea1480a71641aaae97e3407
- MD5 82de08906a4bcf48c1931393d9084747
- SHA1 a6719f0c0ccc1d09d35470d545fe0bac244a1245
- SHA512 953f5b7179eb97c51e9d9088a3cc92d21c3a27a4d06825dcdbdc4ccb0b4ab7aff42eea8a9f122d22e7f028e47ded5a9f3c977673315d795a126479a9f9e32861
- SSDEEP 24576:orKr+U4rvxLEOpayI7qWwfMaCGRdd3aEHX:bf4rJL7paZtGRddKEHX
- TLSH T15705021274E380F2E2F516350AF99A714AFDB8310A208E6F23D4576E5F752C2D626E73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1