General

  • Target

    2025-04-03_57b59952d3b4dfa650019a8097549b5b_amadey_black-basta_cobalt-strike_luca-stealer_smoke-loader

  • Size

    164KB

  • MD5

    57b59952d3b4dfa650019a8097549b5b

  • SHA1

    551dd1917681baaef77c1069697d22fa80083d51

  • SHA256

    2c10710dc3b2d3d970e2e31900998f9f4b1809c3785903ccd865d592d27aa2dc

  • SHA512

    c998ceca322d1aad5a1f45b3e9f388d4573d6254fc1d6d17c17e10013acf92641065f2bed80b7f114669b41abff5d6550b0c21bbd9ff0026f4d65fd3bbab7136

  • SSDEEP

    3072:lpiDiHmJzLHgP03WYt7ulin1MVo5+FwVDoC8naf5sLi4/HVd7B3AHygjsftjFjQ1:lpiDiHmJzLHgP03WYt7ulin1MVo5+Fw/

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.156.73.98

45.91.200.135

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-04-03_57b59952d3b4dfa650019a8097549b5b_amadey_black-basta_cobalt-strike_luca-stealer_smoke-loader
    .exe windows:6 windows x86 arch:x86

    0e8dc3c1ed837a50062e1587a9cd450e


    Headers

    Imports

    Sections