General

  • Target
    2026-10-01_5073891ee317ad1ee35e0d45935200e4_amadey_elex_hijackloader_luca-stealer_njrat_smoke-loader
  • Size 1006KB
  • Sample261002-r8vsbasz3p
  • SHA256 ef566a82fb0fc56d5ab6906d5f225646ee59129a3bc0134133a3a5806bcafee7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-10-01_5073891ee317ad1ee35e0d45935200e4_amadey_elex_hijackloader_luca-stealer_njrat_smoke-loader
    • Size 1006KB
    • SHA256 ef566a82fb0fc56d5ab6906d5f225646ee59129a3bc0134133a3a5806bcafee7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks