General
- Target 2025-11-19_a0f2cb3c980e2e0e0690bfaff7053ea7_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_remcos
- Size 442KB
- Sample251119-ejtshafm8w
- SHA256 4703ad1cec193d7c9bd57adc10801126b31006246f211e743c39ba78419bf136
- MD5 a0f2cb3c980e2e0e0690bfaff7053ea7
- SHA1 dccb52f797edaec1729e66fd3e570089bfc2b05f
- SHA512 1ffb46ff96b0a20a7e03b51d261eb5fdf0977126e9dddb6ab0f8fd1f66c048da30832ba236f4142fd84387ff0f838106ca3aa6fa99f5517c75ad2697d4d4f209
- SSDEEP 12288:Dgm8lidWD+wB+TI/Rga3eyqBaKuJ+A9ok5jmF+N5KWd1NpgKFnEWmg5I+cBojKFB:QwWD+HEZmyx5tdskW
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
2025-11-19_a0f2cb3c980e2e0e0690bfaff7053ea7_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_remcos.exe
Resource
win10v2004-20251016-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2025-11-19_a0f2cb3c980e2e0e0690bfaff7053ea7_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_remcos.exe
Resource
win11-20250619-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
amadey
Version
-
4.30
Botnet
-
93e758
C2
-
http://185.196.10.188
-
http://45.159.189.140
-
http://89.23.103.42
Attributes
-
install_dir
2a95693f48
-
install_file
Hkbsse.exe
-
strings_key
e56b7afd394d96c19e5f8c4c2b04c71c
-
url_paths
/hb9IvshS/index.php
/hb9IvshS2/index.php
/hb9IvshS3/index.php
rc4.plain
Targets
-
- Target 2025-11-19_a0f2cb3c980e2e0e0690bfaff7053ea7_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_remcos
- Size 442KB
- SHA256 4703ad1cec193d7c9bd57adc10801126b31006246f211e743c39ba78419bf136
- MD5 a0f2cb3c980e2e0e0690bfaff7053ea7
- SHA1 dccb52f797edaec1729e66fd3e570089bfc2b05f
- SHA512 1ffb46ff96b0a20a7e03b51d261eb5fdf0977126e9dddb6ab0f8fd1f66c048da30832ba236f4142fd84387ff0f838106ca3aa6fa99f5517c75ad2697d4d4f209
- SSDEEP 12288:Dgm8lidWD+wB+TI/Rga3eyqBaKuJ+A9ok5jmF+N5KWd1NpgKFnEWmg5I+cBojKFB:QwWD+HEZmyx5tdskW
- MD5 SHA1 SHA512 SSDEEP
Score3/10