General
- Target 2026-08-08_e1fee31493e0aa2f762c971951d89efe_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 859KB
- Sample260808-c1nxgabc24
- SHA256 aabe1e2f991cd790c9f5a116a7c8ad955b319c3becd8f400b2e5a3cd73ccb993
- MD5 e1fee31493e0aa2f762c971951d89efe
- SHA1 6c433c09e8750678e0fc8eeb55ae6e016d8e0a94
- SHA512 a7f748506a966835280d1e426c49487d7f8f308fb24a68e2a5ef86e0c521c6b5a2fe90a22015865b2b6e1c0d910dcb415caed9b1bae16a0cde9c1a550860a97b
- SSDEEP 24576:LxcVpz3L2SrGxHREVW2X9HPfT7BtXtf9k2P7XFl9c2+C:CHb2Sr+HR4W2pTVtLk2PzFzc2+
- TLSH T1FA15021276E68876F6B306321DB46BE549BEB9220832CE2F13D40D5DDE74581D63AF32
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_e1fee31493e0aa2f762c971951d89efe_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_e1fee31493e0aa2f762c971951d89efe_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 859KB
- SHA256 aabe1e2f991cd790c9f5a116a7c8ad955b319c3becd8f400b2e5a3cd73ccb993
- MD5 e1fee31493e0aa2f762c971951d89efe
- SHA1 6c433c09e8750678e0fc8eeb55ae6e016d8e0a94
- SHA512 a7f748506a966835280d1e426c49487d7f8f308fb24a68e2a5ef86e0c521c6b5a2fe90a22015865b2b6e1c0d910dcb415caed9b1bae16a0cde9c1a550860a97b
- SSDEEP 24576:LxcVpz3L2SrGxHREVW2X9HPfT7BtXtf9k2P7XFl9c2+C:CHb2Sr+HR4W2pTVtLk2PzFzc2+
- TLSH T1FA15021276E68876F6B306321DB46BE549BEB9220832CE2F13D40D5DDE74581D63AF32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1