General
- Target 2026-08-16_e6cb91c744078868f1e99c443f465c2c_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 787KB
- Sample260816-d2a8facl7w
- SHA256 c681007f3e4d625cdada67a8e0eb45505be137b74c674e9709c2e948b26a7afd
- MD5 e6cb91c744078868f1e99c443f465c2c
- SHA1 a7afdae568ac56c95cf5a0f7080ec2a99639d078
- SHA512 bca2e7de4ce27efd70d6197df20c238aa7839de2ee6cbc138a0e6ecb6c03a9e063d76ca2091b0cdac77fdb00cbfc2e6543527c937440ddba9ac6e8ffb9aacd16
- SSDEEP 24576:nr5r+I4rvxLmVDB3Jw8QkVO+GftQuksrqLsN:Zr4rJLmhBCD/fxkAqy
- TLSH T15F050222B5E2C4B1D1B7493409F5AA716ABDBC300A209FBB23D4572F1FB45819639E73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_e6cb91c744078868f1e99c443f465c2c_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_e6cb91c744078868f1e99c443f465c2c_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 787KB
- SHA256 c681007f3e4d625cdada67a8e0eb45505be137b74c674e9709c2e948b26a7afd
- MD5 e6cb91c744078868f1e99c443f465c2c
- SHA1 a7afdae568ac56c95cf5a0f7080ec2a99639d078
- SHA512 bca2e7de4ce27efd70d6197df20c238aa7839de2ee6cbc138a0e6ecb6c03a9e063d76ca2091b0cdac77fdb00cbfc2e6543527c937440ddba9ac6e8ffb9aacd16
- SSDEEP 24576:nr5r+I4rvxLmVDB3Jw8QkVO+GftQuksrqLsN:Zr4rJLmhBCD/fxkAqy
- TLSH T15F050222B5E2C4B1D1B7493409F5AA716ABDBC300A209FBB23D4572F1FB45819639E73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1