General

  • Target

    2025-04-03_bab59d6d224b00ea4d4a8b3964fe1fb4_amadey_black-basta_cobalt-strike_luca-stealer_smoke-loader

  • Size

    164KB

  • MD5

    bab59d6d224b00ea4d4a8b3964fe1fb4

  • SHA1

    13aab48b86d4dab8fc43d6527f6abe883a4d04a0

  • SHA256

    b98435636be32eaba1edc078f0771c603085c28e56c136374345f105c125c6a5

  • SHA512

    c3d2ba1171abb249c97e890bf53addf3dfe6f0fbb854600a6d1bcdba7c3103cb93689b02c327dc34ea39ff20f427812ac9146d89de5f5897e6623886ca376899

  • SSDEEP

    3072:CpiDiHSJzLHgP03WYt7ulin1MVo5+FwVDoC8naf5sLi4/HVd7B3AHygjsftjFjQo:CpiDiHSJzLHgP03WYt7ulin1MVo5+FwG

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.156.73.98

45.91.200.135

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-04-03_bab59d6d224b00ea4d4a8b3964fe1fb4_amadey_black-basta_cobalt-strike_luca-stealer_smoke-loader
    .exe windows:6 windows x86 arch:x86

    0e8dc3c1ed837a50062e1587a9cd450e


    Headers

    Imports

    Sections