General
- Target 2026-08-08_c6f76693ef52cda803b8bf9ec94fd01b_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 783KB
- Sample260808-c84mws1xhv
- SHA256 e152f3a929713efd6aca09a0a4e18f35917df6bfd40eb854a6b0c2284c2c4fe4
- MD5 c6f76693ef52cda803b8bf9ec94fd01b
- SHA1 6a4ced60faf7a0121be41d8acc7e83035fb5dde5
- SHA512 a755ecc814b277364fedfa9a8d38e28dd8fd681f3f3c00e2f57f40685c408bef077bf097183ec4918a5d029aa06cb9e78b455f4bd444a93960787bccb79388fc
- SSDEEP 24576:yrUr+I4rvxL3EVW2X9HPfT7BtXtf9k2P7XFl9c2+C:br4rJL34W2pTVtLk2PzFzc2+
- TLSH T16E050212B4E780B1E577063009E0ABB459BEB9350E32CE6F23D55B3D6EB45C18A25F72
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_c6f76693ef52cda803b8bf9ec94fd01b_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_c6f76693ef52cda803b8bf9ec94fd01b_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 783KB
- SHA256 e152f3a929713efd6aca09a0a4e18f35917df6bfd40eb854a6b0c2284c2c4fe4
- MD5 c6f76693ef52cda803b8bf9ec94fd01b
- SHA1 6a4ced60faf7a0121be41d8acc7e83035fb5dde5
- SHA512 a755ecc814b277364fedfa9a8d38e28dd8fd681f3f3c00e2f57f40685c408bef077bf097183ec4918a5d029aa06cb9e78b455f4bd444a93960787bccb79388fc
- SSDEEP 24576:yrUr+I4rvxL3EVW2X9HPfT7BtXtf9k2P7XFl9c2+C:br4rJL34W2pTVtLk2PzFzc2+
- TLSH T16E050212B4E780B1E577063009E0ABB459BEB9350E32CE6F23D55B3D6EB45C18A25F72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1