General
- Target 2026-08-16_7e84e8fe804bf013c881099f0cdc176c_amadey_elex_luca-stealer_njrat_smoke-loader
- Size 2.0MB
- Sample260816-clarasxfpg
- SHA256 f98e86213ed13cbbcee4af0cdee3757708af235f37ff83c883a117c307f8ad35
- MD5 7e84e8fe804bf013c881099f0cdc176c
- SHA1 f12c1bc69931bb4372d1ddbaf278838b834ae673
- SHA512 642e606a37e6ee058df98cd9c6d4dbb421385027cdc505d928902f9636a78ed781cdaf45667ef5ed7098bbc66b7bb952747b723025394311cd80b39a908b48b2
- SSDEEP 24576:7G/Wem1gXq5L9uSWidgpm6hbpOSRKQ3wqycitCy/heuF8Orv4GLtPUf/2YQkd:7kXq5L9uiibpJKQov1zlUf/2a
- TLSH T115A56B0DA761512CFDF305FA4AFE23ACA82CBDA0075894D352C42ADED725AE57D32613
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_7e84e8fe804bf013c881099f0cdc176c_amadey_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_7e84e8fe804bf013c881099f0cdc176c_amadey_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_7e84e8fe804bf013c881099f0cdc176c_amadey_elex_luca-stealer_njrat_smoke-loader
- Size 2.0MB
- SHA256 f98e86213ed13cbbcee4af0cdee3757708af235f37ff83c883a117c307f8ad35
- MD5 7e84e8fe804bf013c881099f0cdc176c
- SHA1 f12c1bc69931bb4372d1ddbaf278838b834ae673
- SHA512 642e606a37e6ee058df98cd9c6d4dbb421385027cdc505d928902f9636a78ed781cdaf45667ef5ed7098bbc66b7bb952747b723025394311cd80b39a908b48b2
- SSDEEP 24576:7G/Wem1gXq5L9uSWidgpm6hbpOSRKQ3wqycitCy/heuF8Orv4GLtPUf/2YQkd:7kXq5L9uiibpJKQov1zlUf/2a
- TLSH T115A56B0DA761512CFDF305FA4AFE23ACA82CBDA0075894D352C42ADED725AE57D32613
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Disables taskbar notifications via registry modification
-
Executes dropped EXE
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Windows security modification
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
2Credentials In Files
2