2026-10-13_55c4178fb9ac62571b453d850a3ebdce_amadey_blankgrabber_elex_luca-stealer_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-13_55c4178fb9ac62571b453d850a3ebdce_amadey_blankgrabber_elex_luca-stealer_njrat_smoke-loader
Size 1.7MB
Sample261015-ql23fabs4q
SHA256 53ed1d3c62d19e52bc0eeab5316a4a530eaa14b46ad21828438e99f28024e43f
MD5 55c4178fb9ac62571b453d850a3ebdce
SHA1 cdfa18449afd013bad7d7586f11b35956f7886ea
SHA512 ff9c8fba66445f236aa27e2170b2f34f06ad899e0d87552757cf13807330e7239e6aed161ccad5a7ae8d6920bd3f8c985044bfe554efa2dc85c6ce7a3c3e3be8
SSDEEP 24576:IXFQHunV2qjimHXQt/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:IV5nV2N8QtLNiXicJFFRGNzj3
TLSH
T1BB85F12179A4C136C13B81304D3AD7989A3DED704F6245C3B3D46EBEAE345C1EB299A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-13_55c4178fb9ac62571b453d850a3ebdce_amadey_blankgrabber_elex_luca-stealer_njrat_smoke-loader

File Explorer

2026-10-13_55c4178fb9ac62571b453d850a3ebdce_amadey_blankgrabber_elex_luca-stealer_njrat_smoke-loader

.exe 1.7MB

2026-10-13_55c4178fb9ac62571b453d850a3ebdce_amadey_blankgrabber_elex_luca-stealer_njrat_smoke-loader

IMPHASH 1528ddaa840352b9e31e49ff5f0b214f
SHA256 53ed1d3c62d19e52bc0eeab5316a4a530eaa14b46ad21828438e99f28024e43f
MD5 55c4178fb9ac62571b453d850a3ebdce
SHA1 cdfa18449afd013bad7d7586f11b35956f7886ea
SHA512 ff9c8fba66445f236aa27e2170b2f34f06ad899e0d87552757cf13807330e7239e6aed161ccad5a7ae8d6920bd3f8c985044bfe554efa2dc85c6ce7a3c3e3be8
SSDEEP 24576:IXFQHunV2qjimHXQt/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:IV5nV2N8QtLNiXicJFFRGNzj3
TLSH
T1BB85F12179A4C136C13B81304D3AD7989A3DED704F6245C3B3D46EBEAE345C1EB299A7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

173057

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ole32

StringFromGUID2 IIDFromString

shell32

SHGetFolderPathA SHGetFolderPathW

user32

DispatchMessageW IsWindowUnicode MsgWaitForMultipleObjectsEx PeekMessageA GetMessageA DispatchMessageA GetMessageW TranslateMessage

kernel32

DeleteCriticalSection SetDllDirectoryA FileTimeToSystemTime LocalFree MultiByteToWideChar WideCharToMultiByte WaitForSingleObject LoadLibraryExW OpenMutexA DeleteFileA FindClose GetFileAttributesA RemoveDirectoryA SetFileAttributesA CloseHandle SetLastError InitializeCriticalSectionEx GetTempPathA GetCurrentProcess GetSystemDirectoryA GetNativeSystemInfo GetModuleFileNameA GetModuleHandleExW Sleep GetCurrentProcessId GetCurrentThreadId GetLocalTime FormatMessageW ReadFile SetHandleInformation CreatePipe PeekNamedPipe TerminateProcess InitializeCriticalSectionAndSpinCount CreateProcessA GetModuleHandleExA LoadResource LockResource SizeofResource FindResourceA FreeLibrary GetProcAddress LoadLibraryW QueryPerformanceCounter CreateFileW SetFilePointerEx InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetStringTypeW EncodePointer LCMapStringEx GetCPInfo IsDebuggerPresent OutputDebugStringW RaiseException GetSystemTimeAsFileTime GetLastError DecodePointer LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetFileSizeEx ReadConsoleW GetModuleHandleW GetCurrentDirectoryW HeapReAlloc GetTimeZoneInformation HeapSize FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetStartupInfoW IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter CompareStringW VirtualProtect GetProcessHeap InitializeSListHead RtlUnwind GetExitCodeProcess FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc ExitProcess SetStdHandle CreateDirectoryW GetFullPathNameW WriteConsoleW GetModuleFileNameW GetStdHandle GetConsoleMode GetConsoleOutputCP WriteFile SetEndOfFile SystemTimeToTzSpecificLocalTime GetFileType GetFileInformationByHandle GetDriveTypeW GetCommandLineW GetCommandLineA TlsFree TlsSetValue TlsGetValue TlsAlloc

advapi32

RegCreateKeyExA ConvertStringSecurityDescriptorToSecurityDescriptorW RegCloseKey RegQueryValueExA RegOpenKeyExA

oleaut32

SysFreeString GetErrorInfo

msi

ord67 ord168 ord137 ord141 ord8 ord117 ord31 ord159 ord160 ord91 ord115 ord44 ord204 ord189

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueW

Name

.text

Size

331KB

Virtual Size

330KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

115KB

Virtual Size

114KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

31KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.2MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-13_55c4178fb9ac62571b453d850a3ebdce_amadey_blankgrabber_elex_luca-stealer_njrat_smoke-loader

ole32

shell32

user32

kernel32

advapi32

oleaut32

msi

version

generic