General
- Target 2026-08-08_99a1b0c34ddd3df92463700e3d781792_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 787KB
- Sample260808-dk37wsgn5x
- SHA256 f477b1bd8bcb72a23a47ef8cfe425f60b5974460b5af91398166deb6bfb85d8f
- MD5 99a1b0c34ddd3df92463700e3d781792
- SHA1 210b752b51e00135a68b4df68bd38029cf2c1586
- SHA512 e930a6efe5f01f17a036b5803da731def1abcdebc3998ada2afdb79485918d33236a146068060de459fa4548ef22f2e7c9946ef641b63c216ef19bff752f0e82
- SSDEEP 24576:nr5r+I4rvxLApKhHrj1qCcWSRQHpSF+J:Zr4rJLbhL6WSRMpH
- TLSH T1B505011278D384B2E1B30A340DF5AA705DBEBD300A259A7F23E4077D1E746D1D669AB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_99a1b0c34ddd3df92463700e3d781792_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_99a1b0c34ddd3df92463700e3d781792_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_99a1b0c34ddd3df92463700e3d781792_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 787KB
- SHA256 f477b1bd8bcb72a23a47ef8cfe425f60b5974460b5af91398166deb6bfb85d8f
- MD5 99a1b0c34ddd3df92463700e3d781792
- SHA1 210b752b51e00135a68b4df68bd38029cf2c1586
- SHA512 e930a6efe5f01f17a036b5803da731def1abcdebc3998ada2afdb79485918d33236a146068060de459fa4548ef22f2e7c9946ef641b63c216ef19bff752f0e82
- SSDEEP 24576:nr5r+I4rvxLApKhHrj1qCcWSRQHpSF+J:Zr4rJLbhL6WSRMpH
- TLSH T1B505011278D384B2E1B30A340DF5AA705DBEBD300A259A7F23E4077D1E746D1D669AB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1