2026-08-25_da79103dfd2143b1f0f40279bf781ac9_amadey_elex_luca-stealer_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-25_da79103dfd2143b1f0f40279bf781ac9_amadey_elex_luca-stealer_njrat_smoke-loader
Size 1.7MB
Sample260826-hca9cstdqg
SHA256 0614dad0746955127ebd8079c7545536a78b9ed90181a3eb18da553cdcf52b90
MD5 da79103dfd2143b1f0f40279bf781ac9
SHA1 fea848509e5d05f4753acd3200bddf93328fd35e
SHA512 d0da0e4a74bb96bb4d7696f393b9494203c7d54bd06de927edce5d3cf11e0e674ce2b890ebf2d8c837b9e1c68c34af63ba3e503f8adf2554efe7322da590e5b2
SSDEEP 24576:us9Ds4lYCqhfHc8enuGG5UKE0gA8PksahK5Z:X5Dcve1A85WKb
TLSH
T187858E107C808221FFE220B79AFDBE7A497DA8744B3C41C7529C19EE96646D22F35793
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-25_da79103dfd2143b1f0f40279bf781ac9_amadey_elex_luca-stealer_njrat_smoke-loader

File Explorer

2026-08-25_da79103dfd2143b1f0f40279bf781ac9_amadey_elex_luca-stealer_njrat_smoke-loader

.exe 1.7MB

2026-08-25_da79103dfd2143b1f0f40279bf781ac9_amadey_elex_luca-stealer_njrat_smoke-loader

IMPHASH 2e6c82d0fbf370fefea246b1cfdceb07
SHA256 0614dad0746955127ebd8079c7545536a78b9ed90181a3eb18da553cdcf52b90
MD5 da79103dfd2143b1f0f40279bf781ac9
SHA1 fea848509e5d05f4753acd3200bddf93328fd35e
SHA512 d0da0e4a74bb96bb4d7696f393b9494203c7d54bd06de927edce5d3cf11e0e674ce2b890ebf2d8c837b9e1c68c34af63ba3e503f8adf2554efe7322da590e5b2
SSDEEP 24576:us9Ds4lYCqhfHc8enuGG5UKE0gA8PksahK5Z:X5Dcve1A85WKb
TLSH
T187858E107C808221FFE220B79AFDBE7A497DA8744B3C41C7529C19EE96646D22F35793
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

29411

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

%%%CrossroadsLiveMirror.pdb%%%

winmm

timeEndPeriod timeBeginPeriod

ws2_32

GetAddrInfoW WSAIoctl WSAGetLastError WSACleanup WSAStartup socket InetPtonW recv htons htonl ioctlsocket closesocket bind FreeAddrInfoW sendto

kernel32

AreFileApisANSI WriteConsoleW HeapSize GetProcessHeap SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW OutputDebugStringW GetTimeZoneInformation HeapReAlloc GetOEMCP GetACP IsValidCodePage SetConsoleCtrlHandler ReadConsoleW SetFilePointerEx GetConsoleMode GetConsoleOutputCP CreateFileW DeleteFileW GetFileAttributesW GetFileSizeEx ReadFile WriteFile CloseHandle GetLastError WaitForSingleObject Sleep GetCurrentProcess TerminateProcess GetExitCodeProcess CreateProcessW OpenProcess GetSystemInfo GetTickCount GetTickCount64 VirtualQueryEx ReadProcessMemory WriteProcessMemory MapViewOfFile UnmapViewOfFile GetModuleFileNameW CreateFileMappingA OpenFileMappingA QueryFullProcessImageNameW MoveFileExW FlushFileBuffers QueryPerformanceCounter QueryPerformanceFrequency GetSystemTimePreciseAsFileTime LocalFree FormatMessageA GetLocaleInfoEx ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared TryAcquireSRWLockExclusive TryAcquireSRWLockShared SleepConditionVariableSRW GetCurrentThreadId SetCurrentDirectoryW GetCurrentDirectoryW CreateDirectoryW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetDiskFreeSpaceExW GetFileAttributesExW GetFileInformationByHandle GetFinalPathNameByHandleW GetFullPathNameW SetFileAttributesW SetFileInformationByHandle SetFileTime GetTempPathW CreateFile2 SetEndOfFile DeviceIoControl GetModuleHandleW GetProcAddress CreateDirectoryExW CopyFile2 CreateHardLinkW GetFileInformationByHandleEx CreateSymbolicLinkW MultiByteToWideChar WideCharToMultiByte GetStringTypeW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx CompareStringEx GetCPInfo IsProcessorFeaturePresent GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree GetStdHandle ExitProcess FreeLibrary GetModuleHandleExW GetCommandLineA GetCommandLineW IsDebuggerPresent UnhandledExceptionFilter GetCurrentThread HeapAlloc HeapFree GetFileType IsThreadAFiber VirtualProtect LoadLibraryExW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW

Name

.text

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

178KB

Virtual Size

178KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

270B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

409B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-25_da79103dfd2143b1f0f40279bf781ac9_amadey_elex_luca-stealer_njrat_smoke-loader

winmm

ws2_32

kernel32

generic