General
- Target 2026-08-08_25060bb72575adfa6ed6f36afeea0ab4_amadey_elex_luca-stealer_njrat_smoke-loader
- Size 2.0MB
- Sample260808-tweaxavshx
- SHA256 d49f15b49e99a5315ee4124219aca3530a6ab67f9c46fcb791cd0513bed4045e
- MD5 25060bb72575adfa6ed6f36afeea0ab4
- SHA1 cdb9ab04d760634ec327c32f5bb6860b8b208b7a
- SHA512 d55fc02d3154df3c044e6e303e2c215b41bc3b4dfcde277645f6fd26f729e5982a29b94814ad223fa029c85145cd898054a7f72aeb3cd18836cdcb3af3ff6e3b
- SSDEEP 24576:gGyWem1gXq5L9uSWidgpm6hbpOSRKQXbj3x/sL0OCbrb8T223BA:g9Xq5L9uiibpJKQLu+3lwBA
- TLSH T186A56C21B7404C28FCF706FA86FFE07D966D7AE0571A94C721C429EDBA166E43C3125A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_25060bb72575adfa6ed6f36afeea0ab4_amadey_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_25060bb72575adfa6ed6f36afeea0ab4_amadey_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_25060bb72575adfa6ed6f36afeea0ab4_amadey_elex_luca-stealer_njrat_smoke-loader
- Size 2.0MB
- SHA256 d49f15b49e99a5315ee4124219aca3530a6ab67f9c46fcb791cd0513bed4045e
- MD5 25060bb72575adfa6ed6f36afeea0ab4
- SHA1 cdb9ab04d760634ec327c32f5bb6860b8b208b7a
- SHA512 d55fc02d3154df3c044e6e303e2c215b41bc3b4dfcde277645f6fd26f729e5982a29b94814ad223fa029c85145cd898054a7f72aeb3cd18836cdcb3af3ff6e3b
- SSDEEP 24576:gGyWem1gXq5L9uSWidgpm6hbpOSRKQXbj3x/sL0OCbrb8T223BA:g9Xq5L9uiibpJKQLu+3lwBA
- TLSH T186A56C21B7404C28FCF706FA86FFE07D966D7AE0571A94C721C429EDBA166E43C3125A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Disables taskbar notifications via registry modification
-
Executes dropped EXE
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Windows security modification
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
2Credentials In Files
2