2026-09-10_31f58b83520574b5854b16ef448c541f_amadey_elex_luca-stealer_njrat_remcos_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-10_31f58b83520574b5854b16ef448c541f_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
Size 1.1MB
Sample260910-w1a56aeb74
SHA256 0f93c30689924dff5b04bfed5c764660b6af1f7ce175dc8a0ffe24ca36afc0b0
MD5 31f58b83520574b5854b16ef448c541f
SHA1 7625cf0eb3ca916e144dc29af990e7cc584d3a8c
SHA512 705b78af2fe202db5e2aee0a189a69e0923519ad68f57729a2faf00baa629d0344db3dce9b6f89f6cc1b2c00fbda13967e6b8170ebff166e2ace86ca227ae4b7
SSDEEP 24576:l7uQLJ+PK43EwoNhY6khIh3YU5A+nug2+rk13EX:xQoT7khIlt5AyBg10
TLSH
T10F455B01B6919038F8B315F699FE625D5A3DBAE01B2490CB93C42DED9B25AF0BD30717
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-10_31f58b83520574b5854b16ef448c541f_amadey_elex_luca-stealer_njrat_remcos_smoke-loader

File Explorer

2026-09-10_31f58b83520574b5854b16ef448c541f_amadey_elex_luca-stealer_njrat_remcos_smoke-loader

.exe 1.1MB

2026-09-10_31f58b83520574b5854b16ef448c541f_amadey_elex_luca-stealer_njrat_remcos_smoke-loader

IMPHASH 50a721158036d94429268ff8fbf2be32
SHA256 0f93c30689924dff5b04bfed5c764660b6af1f7ce175dc8a0ffe24ca36afc0b0
MD5 31f58b83520574b5854b16ef448c541f
SHA1 7625cf0eb3ca916e144dc29af990e7cc584d3a8c
SHA512 705b78af2fe202db5e2aee0a189a69e0923519ad68f57729a2faf00baa629d0344db3dce9b6f89f6cc1b2c00fbda13967e6b8170ebff166e2ace86ca227ae4b7
SSDEEP 24576:l7uQLJ+PK43EwoNhY6khIh3YU5A+nug2+rk13EX:xQoT7khIlt5AyBg10
TLSH
T10F455B01B6919038F8B315F699FE625D5A3DBAE01B2490CB93C42DED9B25AF0BD30717
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

355456

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\repos\gn-build\out\Debug\xp_activate32.exe.pdb

kernel32

AllocConsole CloseHandle CompareStringW CreateEventW CreateFileW CreateProcessA CreateProcessW CreateThread DecodePointer DeleteCriticalSection EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess FindClose FindFirstFileExA FindFirstFileExW FindNextFileA FindNextFileW FlushFileBuffers FormatMessageW FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleCP GetConsoleMode GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetExitCodeProcess GetFileAttributesExW GetFileType GetLastError GetLocaleInfoW GetModuleFileNameA GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemInfo GetSystemTimeAsFileTime GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID HeapAlloc HeapFree HeapQueryInformation HeapReAlloc HeapSize HeapValidate InitializeCriticalSectionAndSpinCount InitializeSListHead InterlockedFlushSList InterlockedPushEntrySList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringW LeaveCriticalSection LoadLibraryExW LoadLibraryW MultiByteToWideChar OutputDebugStringA OutputDebugStringW QueryPerformanceCounter RaiseException ReadConsoleW ReadFile RtlUnwind SetConsoleCtrlHandler SetEndOfFile SetEnvironmentVariableA SetEnvironmentVariableW SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter SwitchToThread TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW WriteFile

comctl32

InitCommonControlsEx

ole32

CoCreateInstance CoInitializeEx CoUninitialize

oleaut32

SysAllocString SysFreeString

user32

DestroyIcon DialogBoxParamW EnableWindow EndDialog GetDlgItem GetDlgItemTextW GetSystemMetrics LoadImageW LoadStringW MessageBoxW SendMessageW SetDlgItemTextW UpdateWindow

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-10_31f58b83520574b5854b16ef448c541f_amadey_elex_luca-stealer_njrat_remcos_smoke-loader

kernel32

comctl32

ole32

oleaut32

user32

generic