General
- Target 2026-10-02_0b483c2e35b0a1515de9eec9f6ab8b03_amadey_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 1010KB
- Sample261003-v9ghvstdrc
- SHA256 2b7c9b816831d4c00a549075bc0ff5a4dcb1a055f98b535926c1b8bc29fce302
- MD5 0b483c2e35b0a1515de9eec9f6ab8b03
- SHA1 0712157be65e472a15c20c88ec9ff26295449945
- SHA512 5aeccac913e4c13d1946566ff7ebba34d9eb56e2569a30f16c02aca2a019f6994a34fc29cd0472aa7ad207f7d490eb3a87c2becbb04180e7aab435b603b4d1e7
- SSDEEP 24576:B8oSFzyJptNQqtn/1CRTl5MiUOdfgiAiwyx3:B8hktBtnQR4vAfgiAiwS3
- TLSH T19E259C3E7E5640B3D471CA3149BF66685ABAEC524D5D09AFD2D8284E3E3D201B3DE630
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_0b483c2e35b0a1515de9eec9f6ab8b03_amadey_elex_hijackloader_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_0b483c2e35b0a1515de9eec9f6ab8b03_amadey_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 1010KB
- SHA256 2b7c9b816831d4c00a549075bc0ff5a4dcb1a055f98b535926c1b8bc29fce302
- MD5 0b483c2e35b0a1515de9eec9f6ab8b03
- SHA1 0712157be65e472a15c20c88ec9ff26295449945
- SHA512 5aeccac913e4c13d1946566ff7ebba34d9eb56e2569a30f16c02aca2a019f6994a34fc29cd0472aa7ad207f7d490eb3a87c2becbb04180e7aab435b603b4d1e7
- SSDEEP 24576:B8oSFzyJptNQqtn/1CRTl5MiUOdfgiAiwyx3:B8hktBtnQR4vAfgiAiwS3
- TLSH T19E259C3E7E5640B3D471CA3149BF66685ABAEC524D5D09AFD2D8284E3E3D201B3DE630
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1