General
- Target 2026-08-12_8f60a8ccb9ff39ef761035a01474649c_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 864KB
- Sample260812-vb6p4ayyax
- SHA256 120d7b90914f58e78e65b73ccca84420cf70e38edab3a2b709009f54af2e3f72
- MD5 8f60a8ccb9ff39ef761035a01474649c
- SHA1 e4313824b309524969aef6e1b53c26a60b20e433
- SHA512 bd33c1aa32fe25a715e2a8332dca1e3efd08d0b39a74b0fb4d790601ccb61b0a1409fcfbe75c4f1b184b746fc77b8312a730bd2b573725800a77ba9cc42498fd
- SSDEEP 24576:OxcVSzdm2SrGxaPEttWl2QzFGGOlppdD7fd:jeY2Sr+aPEfgDGR7fd
- TLSH T18B15021275E188B6F6B315314DB89A7159FEBC210932CEBF23D0096E9E70590E53AB73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_8f60a8ccb9ff39ef761035a01474649c_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_8f60a8ccb9ff39ef761035a01474649c_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_8f60a8ccb9ff39ef761035a01474649c_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 864KB
- SHA256 120d7b90914f58e78e65b73ccca84420cf70e38edab3a2b709009f54af2e3f72
- MD5 8f60a8ccb9ff39ef761035a01474649c
- SHA1 e4313824b309524969aef6e1b53c26a60b20e433
- SHA512 bd33c1aa32fe25a715e2a8332dca1e3efd08d0b39a74b0fb4d790601ccb61b0a1409fcfbe75c4f1b184b746fc77b8312a730bd2b573725800a77ba9cc42498fd
- SSDEEP 24576:OxcVSzdm2SrGxaPEttWl2QzFGGOlppdD7fd:jeY2Sr+aPEfgDGR7fd
- TLSH T18B15021275E188B6F6B315314DB89A7159FEBC210932CEBF23D0096E9E70590E53AB73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1