2026-10-05_6dba95f769ad56d3f97301e0c50a4e18_amadey_elex_floxif_luca-stealer_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-05_6dba95f769ad56d3f97301e0c50a4e18_amadey_elex_floxif_luca-stealer_njrat_smoke-loader
Size 2.2MB
Sample261006-19ebdsh14m
SHA256 01829dcfb11c4966bb0459a425e05661df6d12385e444dfdb8a6b58aa0d78173
MD5 6dba95f769ad56d3f97301e0c50a4e18
SHA1 b86027afc1010f774ff581122f1e15c5c2f56419
SHA512 18e6c27c09779c405bca4709c1d2fb7f41043f651dbcf068a6fa0f6640dede22dad61eb9983891b4c27696bee9bba4acc7bd4516c0d79b085f826733bca88265
SSDEEP 24576:6buhx9qQR9J1jtZQdpWcttvL4P9qHXOeiPx4JLtgfHc86e/2cY9qwMnZPoNSecNm:6622GoqT6LkdNsGa8h6aQpy
TLSH
T1E5B52901A750511DFAE302B35AFE61AC586D7EB007A850C7A1C43AFDE63A7E16E33647
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-05_6dba95f769ad56d3f97301e0c50a4e18_amadey_elex_floxif_luca-stealer_njrat_smoke-loader

File Explorer

2026-10-05_6dba95f769ad56d3f97301e0c50a4e18_amadey_elex_floxif_luca-stealer_njrat_smoke-loader

.exe 2.2MB

2026-10-05_6dba95f769ad56d3f97301e0c50a4e18_amadey_elex_floxif_luca-stealer_njrat_smoke-loader

IMPHASH c7f09c150e48244eabcc7719d501cfc8
SHA256 01829dcfb11c4966bb0459a425e05661df6d12385e444dfdb8a6b58aa0d78173
MD5 6dba95f769ad56d3f97301e0c50a4e18
SHA1 b86027afc1010f774ff581122f1e15c5c2f56419
SHA512 18e6c27c09779c405bca4709c1d2fb7f41043f651dbcf068a6fa0f6640dede22dad61eb9983891b4c27696bee9bba4acc7bd4516c0d79b085f826733bca88265
SSDEEP 24576:6buhx9qQR9J1jtZQdpWcttvL4P9qHXOeiPx4JLtgfHc86e/2cY9qwMnZPoNSecNm:6622GoqT6LkdNsGa8h6aQpy
TLSH
T1E5B52901A750511DFAE302B35AFE61AC586D7EB007A850C7A1C43AFDE63A7E16E33647
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

847067

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Dropbox\Program Works\Source_GOA\BGS2\Develope\BGS2_Main\Debug\BGS2.pdb

d3dx9_43

D3DXCreateFontA D3DXCreateTexture D3DXVec3Normalize D3DXMatrixScaling D3DXCreateTextureFromFileExA D3DXCreateSprite D3DXMatrixTransformation2D D3DXCompileShader

d3d9

Direct3DCreate9

dsound

ord11

winmm

mmioOpenA mmioRead mmioSeek mmioDescend mmioAscend mmioClose

kernel32

CloseHandle GetTickCount GetPrivateProfileStringA GetCurrentDirectoryA CreateDirectoryA CreateFileA lstrcpyA lstrcatA lstrlenA GetLocalTime lstrcmpA QueryPerformanceCounter QueryPerformanceFrequency InterlockedDecrement FreeLibrary GetProcAddress LoadLibraryA SetLocalTime Sleep GetStartupInfoW HeapQueryInformation HeapSize HeapReAlloc SetFilePointerEx ReadConsoleW GetConsoleMode WriteFile FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetTimeFormatW GetDateFormatW GetFileAttributesExW CreateProcessW CreateProcessA GetExitCodeProcess WaitForSingleObject GetCurrentDirectoryW SetCurrentDirectoryW SetConsoleCtrlHandler CreateThread WaitForSingleObjectEx WriteConsoleW OutputDebugStringW OutputDebugStringA GetFileType GetCurrentThread GetTimeZoneInformation FindClose FindFirstFileExA FindFirstFileExW FindNextFileA FindNextFileW GetOEMCP IsValidCodePage SetEnvironmentVariableA SetEnvironmentVariableW SetStdHandle CreateFileW ReadFile FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW VirtualQuery GetProcessHeap GetACP SetEndOfFile GetCurrentProcessId InitializeSListHead LocalFree RtlUnwind GetModuleFileNameW GetConsoleCP GetStdHandle ExitProcess GetSystemInfo HeapValidate HeapFree GetFullPathNameA GetFullPathNameW GetDriveTypeW GetModuleHandleExW GetModuleFileNameA InterlockedFlushSList InterlockedPushEntrySList GetCommandLineA GetLastError FormatMessageW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection DeleteCriticalSection MultiByteToWideChar EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo GetCurrentThreadId IsDebuggerPresent RaiseException UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent HeapAlloc LoadLibraryExW

user32

wsprintfA MessageBoxA PostQuitMessage TranslateMessage DispatchMessageA PeekMessageA DefWindowProcA RegisterClassExA CreateWindowExA DestroyWindow UpdateWindow ShowWindow ShowCursor GetWindowRect GetKeyState ReleaseDC GetDC PtInRect SetRect LoadIconA LoadCursorA EndPaint BeginPaint DialogBoxParamA GetSystemMetrics LoadAcceleratorsA EndDialog

gdi32

DeleteDC SelectObject GetDIBits GetObjectA CreateDCA CreateCompatibleBitmap BitBlt SelectClipRgn GetDeviceCaps DeleteObject CreateRectRgn CreateCompatibleDC

ole32

CoCreateInstance CoInitialize

oleaut32

SysAllocString SysFreeString GetErrorInfo VariantClear VariantInit VariantChangeType SetErrorInfo CreateErrorInfo

aceboard

?GetQueueDataSize@CAceBoard@@QAEHXZ ?GetQueueData@CAceBoard@@QAEHPAE@Z ?SendUserData@CAceBoard@@QAEXPAEH@Z ?CloseAcePort@CAceBoard@@QAEHXZ ?OpenAcePort@CAceBoard@@QAEHPADK@Z ??0CAceBoard@@QAE@XZ

binkw32

_BinkPause@8 _BinkWait@4 _BinkShouldSkip@4 _BinkSetSoundSystem@8 _BinkClose@4 _BinkDoFrame@4 _BinkRegisterFrameBuffers@8 _BinkGetFrameBuffersInfo@8 _BinkOpen@8 _BinkGoto@12 _BinkOpenDirectSound@4 _BinkNextFrame@4

Name

.textbss

Size

Virtual Size

801KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

307KB

Virtual Size

307KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.msvcjmc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

260B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

58KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

60KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=17, id=241, version=40116,

count=172, id=243, version=40116,

count=30, id=242, version=40116,

count=1, id=199, version=41118,

count=21, id=259, version=26706,

count=76, id=261, version=26706,

count=34, id=260, version=26706,

count=2, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=4, id=123, productName=VS2005 build 50727, version=50727,

count=3, id=156, version=21202,

count=204, id=1, productName=Unmarked objects,

count=1, id=171, productName=VS2010 build 30319, version=30319,

count=45, id=261, version=27051,

count=1, id=255, version=27051,

count=1, id=151,

count=1, id=258, version=27051,