General
- Target 2026-10-01_5073891ee317ad1ee35e0d45935200e4_amadey_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 1006KB
- Sample261002-r8vsbasz3p
- SHA256 ef566a82fb0fc56d5ab6906d5f225646ee59129a3bc0134133a3a5806bcafee7
- MD5 5073891ee317ad1ee35e0d45935200e4
- SHA1 c795757b22527a094934c3511e49ad98c398a0ee
- SHA512 bdd9df2fb5eafc6ba8254fb9cb121cff0f426b563f0a0391a526be6126f0214d1dd7159b7bf862ed6c7a0328e41d48547ad3d8a008d73c203f0839e4fc4a0bc2
- SSDEEP 24576:P2Wg7RuuivV3/xZL5WI3uAnTl5MiUOdfgiAiwyx3:Or7RuuwJZZLF3rn4vAfgiAiwS3
- TLSH T1E925C00979B2C6FBC12B05F70C69C6D654BEBC7A6C25895B3764AB8FEC3812044367B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_5073891ee317ad1ee35e0d45935200e4_amadey_elex_hijackloader_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_5073891ee317ad1ee35e0d45935200e4_amadey_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 1006KB
- SHA256 ef566a82fb0fc56d5ab6906d5f225646ee59129a3bc0134133a3a5806bcafee7
- MD5 5073891ee317ad1ee35e0d45935200e4
- SHA1 c795757b22527a094934c3511e49ad98c398a0ee
- SHA512 bdd9df2fb5eafc6ba8254fb9cb121cff0f426b563f0a0391a526be6126f0214d1dd7159b7bf862ed6c7a0328e41d48547ad3d8a008d73c203f0839e4fc4a0bc2
- SSDEEP 24576:P2Wg7RuuivV3/xZL5WI3uAnTl5MiUOdfgiAiwyx3:Or7RuuwJZZLF3rn4vAfgiAiwS3
- TLSH T1E925C00979B2C6FBC12B05F70C69C6D654BEBC7A6C25895B3764AB8FEC3812044367B1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1