General

  • Target

    2025-04-03_ce1417ccdef322cb2e052b7079a383cd_amadey_black-basta_cobalt-strike_luca-stealer_smoke-loader

  • Size

    164KB

  • MD5

    ce1417ccdef322cb2e052b7079a383cd

  • SHA1

    d49f6098c713e95ad86cc3f42635a1c545d9f358

  • SHA256

    931b90dce158437e5c1776945085a933592fa4d16da2e93ef4753b19b9b4ae93

  • SHA512

    763d7447836c254c89b1151b41d2724ebe2238cad3866fddb91aa7ad1562100c7c9950c5c0bb42056ba2327356d5e811046300fcb91c7cb59ca176e034124bbe

  • SSDEEP

    3072:CpiDiHSJzLHgP03WYt7ulin1MVo5+FwVDoC8naf5sLi4/HVd7B3AHygjsftjFjQa:CpiDiHSJzLHgP03WYt7ulin1MVo5+Fwg

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.156.73.98

45.91.200.135

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-04-03_ce1417ccdef322cb2e052b7079a383cd_amadey_black-basta_cobalt-strike_luca-stealer_smoke-loader
    .exe windows:6 windows x86 arch:x86

    0e8dc3c1ed837a50062e1587a9cd450e


    Headers

    Imports

    Sections