General

  • Target

    2025-04-03_33878b5fa26c5054c41d15fb1faa2a1f_amadey_black-basta_cobalt-strike_luca-stealer_smoke-loader

  • Size

    164KB

  • MD5

    33878b5fa26c5054c41d15fb1faa2a1f

  • SHA1

    eaee38af7d401b5195b1b99ada61552cf5dcb5c2

  • SHA256

    e425c9cbc41e2b07fe60840b81171f853413886a60cc8d18d4b276b1c14f724d

  • SHA512

    8f23b5bb3e89d44d6a7296b0eeca4e7adbac31f8fac6b8bc1761a738c08e75fe25670fcf266dcf23c796e3d91f8aed1ed18eaef44afd9fb6cc1352e7874dd9d5

  • SSDEEP

    3072:lpiDiHmJzLHgP03WYt7ulin1MVo5+FwVDoC8naf5sLi4/HVd7B3AHygjsftjFjQz:lpiDiHmJzLHgP03WYt7ulin1MVo5+Fwx

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.156.73.98

45.91.200.135

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-04-03_33878b5fa26c5054c41d15fb1faa2a1f_amadey_black-basta_cobalt-strike_luca-stealer_smoke-loader
    .exe windows:6 windows x86 arch:x86

    0e8dc3c1ed837a50062e1587a9cd450e


    Headers

    Imports

    Sections