General
- Target 2026-08-30_0c4689031fdd482882246b66843c4727_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 859KB
- Sample260830-1vapnaszav
- SHA256 c29d0e3c2b180bd32accc77c2637a9c11fb1c4688f9c3f71b4e63d49cd57bebd
- MD5 0c4689031fdd482882246b66843c4727
- SHA1 8699668f1917a219afbd4f206582d1e2a7329e34
- SHA512 08628c397579c18440851599f87b62d55a04d274f8c84329d4c77b9bb38e5940fa250ac434c429650c24c2652fa096677b45da549a1acfe87eebef00d2ba3d42
- SSDEEP 12288:LxEjVjBvgNVOmavh62SrGx+auWKxze7NS0QcnGFgK7B5NvCCQYqvLFaaSpvWlmRs:LxcVpzv02SrGxIWGzOqchszKYiBlmRu
- TLSH T18B15022176E2C8B6E6B319320CB8DB665AFD793208218E7F13D40A5D9E31581D636F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_0c4689031fdd482882246b66843c4727_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_0c4689031fdd482882246b66843c4727_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 859KB
- SHA256 c29d0e3c2b180bd32accc77c2637a9c11fb1c4688f9c3f71b4e63d49cd57bebd
- MD5 0c4689031fdd482882246b66843c4727
- SHA1 8699668f1917a219afbd4f206582d1e2a7329e34
- SHA512 08628c397579c18440851599f87b62d55a04d274f8c84329d4c77b9bb38e5940fa250ac434c429650c24c2652fa096677b45da549a1acfe87eebef00d2ba3d42
- SSDEEP 12288:LxEjVjBvgNVOmavh62SrGx+auWKxze7NS0QcnGFgK7B5NvCCQYqvLFaaSpvWlmRs:LxcVpzv02SrGxIWGzOqchszKYiBlmRu
- TLSH T18B15022176E2C8B6E6B319320CB8DB665AFD793208218E7F13D40A5D9E31581D636F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1