General

  • Target

    2025-04-04_d4f78da9d41ce523460feca46012d652_amadey_black-basta_cobalt-strike_luca-stealer_smoke-loader

  • Size

    164KB

  • MD5

    d4f78da9d41ce523460feca46012d652

  • SHA1

    ccfde298aa6ea0ad06f533f8dc33c464e2af1591

  • SHA256

    5f22cdd211e1eeecd51c49cc00d25d0487a0e640ef6b29c15a1c73e9fe5ebb85

  • SHA512

    920274bd33f46457eaa2ae44fbf2fedb7748d885e3198f6e5d709b84d6a28fa2a9bcdf8a0f4e1717f9e104b94bb3d590791a404e9ac2ac2ca6b004fb5bc757ec

  • SSDEEP

    3072:lpiDiHmJzLHgP03WYt7ulin1MVo5+FwVDoC8naf5sLi4/HVd7B3AHygjsftjFjQr:lpiDiHmJzLHgP03WYt7ulin1MVo5+FwV

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

185.156.73.98

45.91.200.135

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-04-04_d4f78da9d41ce523460feca46012d652_amadey_black-basta_cobalt-strike_luca-stealer_smoke-loader
    .exe windows:6 windows x86 arch:x86

    0e8dc3c1ed837a50062e1587a9cd450e


    Headers

    Imports

    Sections