General

  • Target

    2025-04-03_436d3112aa04540098a1d4b7cb5683dc_amadey_black-basta_cobalt-strike_luca-stealer_smoke-loader

  • Size

    164KB

  • MD5

    436d3112aa04540098a1d4b7cb5683dc

  • SHA1

    91bf6118884b4389a80d10e41e7b94e0df51f520

  • SHA256

    0f145cbb1da8a22c08822022f87ca3d17a4da4d6fd35326f87b063d86dde37b6

  • SHA512

    a3353b19b6d378879dce9f7c6fa553cd7b41897a2cc2039c56585081fadff0ebc538342d8b734c5b908ac7b4c5905ce122f33b36bfedb8cb21457a31169825c9

  • SSDEEP

    3072:lpiDiHmJzLHgP03WYt7ulin1MVo5+FwVDoC8naf5sLi4/HVd7B3AHygjsftjFjQq:lpiDiHmJzLHgP03WYt7ulin1MVo5+Fws

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.156.73.98

45.91.200.135

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-04-03_436d3112aa04540098a1d4b7cb5683dc_amadey_black-basta_cobalt-strike_luca-stealer_smoke-loader
    .exe windows:6 windows x86 arch:x86

    0e8dc3c1ed837a50062e1587a9cd450e


    Headers

    Imports

    Sections