General
- Target 2026-09-04_2859dd4f14fab19942eba4ec1f48321f_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 786KB
- Sample260905-tc2bbsvthz
- SHA256 25b7eb94baf467d95b74bba185967ba7c3aa49bbaa777876c2b9684b86e80609
- MD5 2859dd4f14fab19942eba4ec1f48321f
- SHA1 244a223e2fb184769a7430898bb8ae12ab68e876
- SHA512 fe90f89c12f5bfdfafc2ad952cf15bdadcb9dc89bf6b1110086f9b3e96ee8a4fdccbfe358de0648a3b8e5f5cccf17e59167d6969fcde1b9de17063712fc44f44
- SSDEEP 24576:Srsr+X4rvxLKILD8F8tEi5klhtKrLlzb6cd:rQ4rJLKIfHSa9fla2
- TLSH T11A05021234E2C0B1E576153409F8AAB05BBDB8700D65CE7F63E8576E1F391D1862AEB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_2859dd4f14fab19942eba4ec1f48321f_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_2859dd4f14fab19942eba4ec1f48321f_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_2859dd4f14fab19942eba4ec1f48321f_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 786KB
- SHA256 25b7eb94baf467d95b74bba185967ba7c3aa49bbaa777876c2b9684b86e80609
- MD5 2859dd4f14fab19942eba4ec1f48321f
- SHA1 244a223e2fb184769a7430898bb8ae12ab68e876
- SHA512 fe90f89c12f5bfdfafc2ad952cf15bdadcb9dc89bf6b1110086f9b3e96ee8a4fdccbfe358de0648a3b8e5f5cccf17e59167d6969fcde1b9de17063712fc44f44
- SSDEEP 24576:Srsr+X4rvxLKILD8F8tEi5klhtKrLlzb6cd:rQ4rJLKIfHSa9fla2
- TLSH T11A05021234E2C0B1E576153409F8AAB05BBDB8700D65CE7F63E8576E1F391D1862AEB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1