General
- Target 2026-10-01_bad0c3f9590d1ccbde6c46da36a9435e_amadey_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 1006KB
- Sample261002-e56desvdnh
- SHA256 69f5d4ea2bfc7d8ab4099adecf895e3f39264e2be5db2e6297c87c743de44463
- MD5 bad0c3f9590d1ccbde6c46da36a9435e
- SHA1 b50579e663aceb0a57b39b51564658c417493769
- SHA512 f1d99d7b6db3224d06e62f675620267025d33f6344793f66b6c772c3b5e107b2d3cbbd3097a32f226a8ac6e984bbcfcb9593d811f0fb7940e63595cefcd39d6b
- SSDEEP 24576:w5uB6rKEVxffznNhGxxtl5MiUOdfgiAiwyx3:ebDvAfgiAiwS3
- TLSH T13325CF36B23ED0BAD8682A30D46C56AC447AEC515C2265FB33BDFD1D5CB11C1A8227BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_bad0c3f9590d1ccbde6c46da36a9435e_amadey_elex_hijackloader_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_bad0c3f9590d1ccbde6c46da36a9435e_amadey_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 1006KB
- SHA256 69f5d4ea2bfc7d8ab4099adecf895e3f39264e2be5db2e6297c87c743de44463
- MD5 bad0c3f9590d1ccbde6c46da36a9435e
- SHA1 b50579e663aceb0a57b39b51564658c417493769
- SHA512 f1d99d7b6db3224d06e62f675620267025d33f6344793f66b6c772c3b5e107b2d3cbbd3097a32f226a8ac6e984bbcfcb9593d811f0fb7940e63595cefcd39d6b
- SSDEEP 24576:w5uB6rKEVxffznNhGxxtl5MiUOdfgiAiwyx3:ebDvAfgiAiwS3
- TLSH T13325CF36B23ED0BAD8682A30D46C56AC447AEC515C2265FB33BDFD1D5CB11C1A8227BD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1