General
- Target 2026-11-03_5953f63ad108b1a48ff8a24a550f24c0_amadey_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- Sample261104-ymqpsst1et
- SHA256 795d8d2e4360bc1e39c67b02dae1601e4847169fc2f05cef261de1c0ccc64e61
- MD5 5953f63ad108b1a48ff8a24a550f24c0
- SHA1 bf133717ed2ca56affc8a24d66008e3b46c26235
- SHA512 c40688b7ffb641547a2f4f1ae4796d4af339692ebb468e32d34b18680045b08e5e8c0af9e8dbed7def8274094d7c6849e62788bf43efee8cb1f124a2557ecd71
- SSDEEP 24576:6o8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+Lp:SKjKWQc2b1FVgbjrjxPe1pbPSQm1FloS
- TLSH T14765230176E48035F8B31E3069B4D5B54A7EFE7469309A1B23990E3D2F34A82EA35777
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_5953f63ad108b1a48ff8a24a550f24c0_amadey_elex_hijackloader_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_5953f63ad108b1a48ff8a24a550f24c0_amadey_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- SHA256 795d8d2e4360bc1e39c67b02dae1601e4847169fc2f05cef261de1c0ccc64e61
- MD5 5953f63ad108b1a48ff8a24a550f24c0
- SHA1 bf133717ed2ca56affc8a24d66008e3b46c26235
- SHA512 c40688b7ffb641547a2f4f1ae4796d4af339692ebb468e32d34b18680045b08e5e8c0af9e8dbed7def8274094d7c6849e62788bf43efee8cb1f124a2557ecd71
- SSDEEP 24576:6o8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+Lp:SKjKWQc2b1FVgbjrjxPe1pbPSQm1FloS
- TLSH T14765230176E48035F8B31E3069B4D5B54A7EFE7469309A1B23990E3D2F34A82EA35777
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.