General
- Target 2026-08-06_093356005201b53da9778bc26143b8c4_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 783KB
- Sample260806-cdbcvsbq9s
- SHA256 9a4ffef0df6e1b915a438aba9888814af8aa6137d7a4e9ac79f0a8b2d98252de
- MD5 093356005201b53da9778bc26143b8c4
- SHA1 c4de58873615a1763cece43c80bc5dd51e878ed0
- SHA512 9b7e6ada2078d64cd18a9ba9938f33cac563d98e078e84934b1d429e759575102f2d9c9b1db083f2cdfaff38f3b2609f3fa99598bd36d0f6e21329b631412e26
- SSDEEP 24576:cryr+I4rvxL3v79rZ3P4JNmKHHOVsrZqLHd:zr4rJL3vH4JNduVY8d
- TLSH T1DB050211B0D384B2E4B7063509F5AF706AEEBC7256209F6F27D81B2E1F35981D625A33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_093356005201b53da9778bc26143b8c4_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_093356005201b53da9778bc26143b8c4_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_093356005201b53da9778bc26143b8c4_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 783KB
- SHA256 9a4ffef0df6e1b915a438aba9888814af8aa6137d7a4e9ac79f0a8b2d98252de
- MD5 093356005201b53da9778bc26143b8c4
- SHA1 c4de58873615a1763cece43c80bc5dd51e878ed0
- SHA512 9b7e6ada2078d64cd18a9ba9938f33cac563d98e078e84934b1d429e759575102f2d9c9b1db083f2cdfaff38f3b2609f3fa99598bd36d0f6e21329b631412e26
- SSDEEP 24576:cryr+I4rvxL3v79rZ3P4JNmKHHOVsrZqLHd:zr4rJL3vH4JNduVY8d
- TLSH T1DB050211B0D384B2E4B7063509F5AF706AEEBC7256209F6F27D81B2E1F35981D625A33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1