General
- Target 2026-11-11_54e01a8b7284cc00e6d107ee37f59cb8_amadey_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- Sample261113-pda4babv4l
- SHA256 25acac6356fe1c62a2e8cb3234cc71c88c80469a9751a0a54b57b3513b81130a
- MD5 54e01a8b7284cc00e6d107ee37f59cb8
- SHA1 6b1996e9d63d9f773d39b0a3d1d56ddbc9461a50
- SHA512 fd41a93fb13074eda7aaacb3de88ce66f95b5c8b724dd86fe949078449fce7a89d6da23251565192467544ccb7b2fe1498203792892acef9f3c833befc9f194c
- SSDEEP 24576:Od8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+Lx:9KjKWQc2b1FVgbjrjxPe1pbPSQm1Flo4
- TLSH T16D65220172E48035F4B31E3068B49AB55B7EFD7459309A4B23990E3D6F38A81EA39777
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-11_54e01a8b7284cc00e6d107ee37f59cb8_amadey_elex_hijackloader_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-11_54e01a8b7284cc00e6d107ee37f59cb8_amadey_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 1.4MB
- SHA256 25acac6356fe1c62a2e8cb3234cc71c88c80469a9751a0a54b57b3513b81130a
- MD5 54e01a8b7284cc00e6d107ee37f59cb8
- SHA1 6b1996e9d63d9f773d39b0a3d1d56ddbc9461a50
- SHA512 fd41a93fb13074eda7aaacb3de88ce66f95b5c8b724dd86fe949078449fce7a89d6da23251565192467544ccb7b2fe1498203792892acef9f3c833befc9f194c
- SSDEEP 24576:Od8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+Lx:9KjKWQc2b1FVgbjrjxPe1pbPSQm1Flo4
- TLSH T16D65220172E48035F4B31E3068B49AB55B7EFD7459309A4B23990E3D6F38A81EA39777
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.