General
- Target 2026-08-15_1905f2bd2d0bdd297795d16b7b3f6de9_amadey_elex_luca-stealer_njrat_play
- Size 4.2MB
- Sample260815-b87twaxvev
- SHA256 d6befe8d589e2103aafc696ccc1832d3692fde0663fbc2c246a8687fef500ebd
- MD5 1905f2bd2d0bdd297795d16b7b3f6de9
- SHA1 82718a2fd9810adab47471985126fe1f3ef4e561
- SHA512 673e0752252f1506bb7b0acf3af9956be9ed1996d9887eb5d2e9030e70933e4b5ff627c4b791fec49f98fe69f3c2032e010266a955030653f94f8fe16ea01ba0
- SSDEEP 98304:wSH1kIUKMoREWv7rQwOoRBlhyRLVYHgPoEKoj+Vux:vH1k+MonryGgnTqQ
- TLSH T17A267CE2BA09F2CFC24E1679D817EE03D85D13F586294902ED5D747EEE63C8612C9E18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-15_1905f2bd2d0bdd297795d16b7b3f6de9_amadey_elex_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_1905f2bd2d0bdd297795d16b7b3f6de9_amadey_elex_luca-stealer_njrat_play.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_1905f2bd2d0bdd297795d16b7b3f6de9_amadey_elex_luca-stealer_njrat_play
- Size 4.2MB
- SHA256 d6befe8d589e2103aafc696ccc1832d3692fde0663fbc2c246a8687fef500ebd
- MD5 1905f2bd2d0bdd297795d16b7b3f6de9
- SHA1 82718a2fd9810adab47471985126fe1f3ef4e561
- SHA512 673e0752252f1506bb7b0acf3af9956be9ed1996d9887eb5d2e9030e70933e4b5ff627c4b791fec49f98fe69f3c2032e010266a955030653f94f8fe16ea01ba0
- SSDEEP 98304:wSH1kIUKMoREWv7rQwOoRBlhyRLVYHgPoEKoj+Vux:vH1k+MonryGgnTqQ
- TLSH T17A267CE2BA09F2CFC24E1679D817EE03D85D13F586294902ED5D747EEE63C8612C9E18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Themida
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.