General
- Target 2026-08-15_40767649fc13fc5c61ec6825cf480f5e_amadey_elex_luca-stealer_mespinoza_njrat_smoke-loader
- Size 43.7MB
- Sample260815-epynmsy1ew
- SHA256 98eb651df9539981698a0338a5879e1d7ad47573a1623dde94d05ba4b9304f4c
- MD5 40767649fc13fc5c61ec6825cf480f5e
- SHA1 a9247b6c2c0db2cbae87eff4c256467b70e54d17
- SHA512 664c097c822ab1fbdb5680121196890d9bdf9b93c54f795d4755a0344879ff70ac20a56e962b658a62d3b3d696e451fda49fe8998935e09b020c2a28601aeeb3
- SSDEEP 786432:I6BUri8UaQHPV0ZfUri8UaQHPV0ZjAbgZZFWYc1RgCwcRuLrBKVKKJLiy:LBUWZa4yZfUWZa4yZWWFsaXB6X
- TLSH T169A723A07EBF24B9D42616369997B07EF83DAD782625408713E4363BBA30211375DE37
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_40767649fc13fc5c61ec6825cf480f5e_amadey_elex_luca-stealer_mespinoza_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_40767649fc13fc5c61ec6825cf480f5e_amadey_elex_luca-stealer_mespinoza_njrat_smoke-loader
- Size 43.7MB
- SHA256 98eb651df9539981698a0338a5879e1d7ad47573a1623dde94d05ba4b9304f4c
- MD5 40767649fc13fc5c61ec6825cf480f5e
- SHA1 a9247b6c2c0db2cbae87eff4c256467b70e54d17
- SHA512 664c097c822ab1fbdb5680121196890d9bdf9b93c54f795d4755a0344879ff70ac20a56e962b658a62d3b3d696e451fda49fe8998935e09b020c2a28601aeeb3
- SSDEEP 786432:I6BUri8UaQHPV0ZfUri8UaQHPV0ZjAbgZZFWYc1RgCwcRuLrBKVKKJLiy:LBUWZa4yZfUWZa4yZWWFsaXB6X
- TLSH T169A723A07EBF24B9D42616369997B07EF83DAD782625408713E4363BBA30211375DE37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.