General

  • Target
    2026-09-04_a759e3d224cf463af64d3d4a3653a6b2_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
  • Size 859KB
  • Sample260905-bfxhfa1tgv
  • SHA256 5ab657276c7658bf70834919ce6ef14722e7eb1da1c61e66b1e85461e9569e80
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-09-04_a759e3d224cf463af64d3d4a3653a6b2_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
    • Size 859KB
    • SHA256 5ab657276c7658bf70834919ce6ef14722e7eb1da1c61e66b1e85461e9569e80
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Windows executables referencing non-Windows User-Agents

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks