General
- Target 2026-10-14_772a802186228db4f93f60345b500f4a_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 1.3MB
- Sample261014-xe2awszzd1
- SHA256 0ad0a11399192c194282de462d2c92d482ca42d5e72aeb32917e758b2052e1ca
- MD5 772a802186228db4f93f60345b500f4a
- SHA1 4814310b01a888b054b8fcb6eaf6b73b14884b46
- SHA512 ee677a1e6efc6262ca3a3826170311fd03d019f4352b0dd898d7c2e02377b058977f4221f2307358c48d5e590127a0b0ca4d6a5f953547ee4965d96b54765ff5
- SSDEEP 12288:DiLJ5i7sJXx0douBjhCCAYi8c1i6oaeNSoeDlHsg+2Vasj0eq12O:uspfjxAf8c46oaKeD5l+25j0t1v
- TLSH T17055B53166D14021E2723A31DD24DDEE342A7DB40FD69D9F9294372907B45F2CE3AE2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-14_772a802186228db4f93f60345b500f4a_amadey_elex_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-14_772a802186228db4f93f60345b500f4a_amadey_elex_luca-stealer_njrat_remcos_smoke-loader
- Size 1.3MB
- SHA256 0ad0a11399192c194282de462d2c92d482ca42d5e72aeb32917e758b2052e1ca
- MD5 772a802186228db4f93f60345b500f4a
- SHA1 4814310b01a888b054b8fcb6eaf6b73b14884b46
- SHA512 ee677a1e6efc6262ca3a3826170311fd03d019f4352b0dd898d7c2e02377b058977f4221f2307358c48d5e590127a0b0ca4d6a5f953547ee4965d96b54765ff5
- SSDEEP 12288:DiLJ5i7sJXx0douBjhCCAYi8c1i6oaeNSoeDlHsg+2Vasj0eq12O:uspfjxAf8c46oaKeD5l+25j0t1v
- TLSH T17055B53166D14021E2723A31DD24DDEE342A7DB40FD69D9F9294372907B45F2CE3AE2A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1