General
- Target 2026-09-04_6e192c0c645c1c6a84513b5e1b900b7c_amadey_elex_luca-stealer_manuscrypt_njrat_remcos_rhadamanthys_smoke-loader_stop
- Size 6.9MB
- Sample260905-jdtmrsgn4y
- SHA256 47334ad763855fe409e9dcb543490a8c8a8a6bf86caceadb2582690dd29c88fb
- MD5 6e192c0c645c1c6a84513b5e1b900b7c
- SHA1 fda234eb18ebb79937873a655afe5080656311ed
- SHA512 a36f572a08f5e0901cd6453a138115772e7ccca8123afddc98415f3c5c0117a31c478aab30d8ba010e1a04223a8b51526d2998adb63d8818382628673a51fb2e
- SSDEEP 98304:EcRGTJhjobxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22Imljj:3GTJlomeGZF6bUpMBF1p/kjRm4OWi2bH
- TLSH T1E0761216F5A48371D033C075C4E2D7BAEA7234921B3086CB5385CB6D2F676E29A3A771
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_6e192c0c645c1c6a84513b5e1b900b7c_amadey_elex_luca-stealer_manuscrypt_njrat_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_6e192c0c645c1c6a84513b5e1b900b7c_amadey_elex_luca-stealer_manuscrypt_njrat_remcos_rhadamanthys_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_6e192c0c645c1c6a84513b5e1b900b7c_amadey_elex_luca-stealer_manuscrypt_njrat_remcos_rhadamanthys_smoke-loader_stop
- Size 6.9MB
- SHA256 47334ad763855fe409e9dcb543490a8c8a8a6bf86caceadb2582690dd29c88fb
- MD5 6e192c0c645c1c6a84513b5e1b900b7c
- SHA1 fda234eb18ebb79937873a655afe5080656311ed
- SHA512 a36f572a08f5e0901cd6453a138115772e7ccca8123afddc98415f3c5c0117a31c478aab30d8ba010e1a04223a8b51526d2998adb63d8818382628673a51fb2e
- SSDEEP 98304:EcRGTJhjobxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22Imljj:3GTJlomeGZF6bUpMBF1p/kjRm4OWi2bH
- TLSH T1E0761216F5A48371D033C075C4E2D7BAEA7234921B3086CB5385CB6D2F676E29A3A771
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Drops file in System32 directory