General
- Target 2026-08-08_021f413134c3a72a3566e9198c76d812_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 783KB
- Sample260808-evtxmszfnc
- SHA256 e85f2474b6e10c93f781886c1c9481a1c564807862e2e3222af37812fd6df282
- MD5 021f413134c3a72a3566e9198c76d812
- SHA1 1cfc6a2671363d824ad0a9d61c0b477513150c2d
- SHA512 0af90eba62bcb5dd80162ef9e8b2640bb3737b3b1763585dad7f64a5da964a627a91a2d7377fbac427d5e5903640873f132b1907a47629cbd2162cdd13c209bb
- SSDEEP 24576:yrUr+I4rvxLyT7Jckdwi6i9bNrqq4E41WFpW3oRos:br4rJL47Jckdwi3N7+WTW3
- TLSH T18D05020175D380B2D1B3463109F8EAB0AAFDBD710E21AE7F13D457795E782C1962AE72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_021f413134c3a72a3566e9198c76d812_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_021f413134c3a72a3566e9198c76d812_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 783KB
- SHA256 e85f2474b6e10c93f781886c1c9481a1c564807862e2e3222af37812fd6df282
- MD5 021f413134c3a72a3566e9198c76d812
- SHA1 1cfc6a2671363d824ad0a9d61c0b477513150c2d
- SHA512 0af90eba62bcb5dd80162ef9e8b2640bb3737b3b1763585dad7f64a5da964a627a91a2d7377fbac427d5e5903640873f132b1907a47629cbd2162cdd13c209bb
- SSDEEP 24576:yrUr+I4rvxLyT7Jckdwi6i9bNrqq4E41WFpW3oRos:br4rJL47Jckdwi3N7+WTW3
- TLSH T18D05020175D380B2D1B3463109F8EAB0AAFDBD710E21AE7F13D457795E782C1962AE72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1