General
- Target 2026-09-04_a759e3d224cf463af64d3d4a3653a6b2_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 859KB
- Sample260905-bfxhfa1tgv
- SHA256 5ab657276c7658bf70834919ce6ef14722e7eb1da1c61e66b1e85461e9569e80
- MD5 a759e3d224cf463af64d3d4a3653a6b2
- SHA1 2adf9733c5e224d2c5498a106bd7c544b614e4c8
- SHA512 d46580f0ce0334a95c0f7ddeed1316ba7e935dfd4e65bb2db603ed0c291410eecb88cbaa8829e8ea1e0f1aaa7760edebc88a0a6727ab48bffe1b18d41e47b174
- SSDEEP 24576:LxcVpzs52SrGx8c67rDYRcPeHbZ5LK2b7kU:CHw2Sr+a7nycWHV5LNvB
- TLSH T1A015021276D18873E6B306320DB99EB25ABDB83208318E2F53D4095E9E71590D63AF77
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_a759e3d224cf463af64d3d4a3653a6b2_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_a759e3d224cf463af64d3d4a3653a6b2_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 859KB
- SHA256 5ab657276c7658bf70834919ce6ef14722e7eb1da1c61e66b1e85461e9569e80
- MD5 a759e3d224cf463af64d3d4a3653a6b2
- SHA1 2adf9733c5e224d2c5498a106bd7c544b614e4c8
- SHA512 d46580f0ce0334a95c0f7ddeed1316ba7e935dfd4e65bb2db603ed0c291410eecb88cbaa8829e8ea1e0f1aaa7760edebc88a0a6727ab48bffe1b18d41e47b174
- SSDEEP 24576:LxcVpzs52SrGx8c67rDYRcPeHbZ5LK2b7kU:CHw2Sr+a7nycWHV5LNvB
- TLSH T1A015021276D18873E6B306320DB99EB25ABDB83208318E2F53D4095E9E71590D63AF77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Drops file in System32 directory