General
- Target 2025-12-01_8a43d16afd320aed17f45c08eca43742_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 648KB
- Sample251201-e94qdswlbm
- SHA256 89c776ff1a7a0880d1d50c3a66087c055cc0fa4e0db92ce7c2cebd2da24a089e
- MD5 8a43d16afd320aed17f45c08eca43742
- SHA1 c0f62f808871618da0accf45d6764898001616c8
- SHA512 b04bfd31b355e4317ad78d41fc3bd5d391f1b23629128442e861d7ef33600afe655e4d096d2e6d4a2d0a7b31a98d69b21abd3fcbe35686115c43695fb5a9ae14
- SSDEEP 12288:sSdGuEPgFaX2YPeynCHaD9BqTSv3YZtF15kjH0otVz:nEuE52YWynCC9kTG3ztV
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
2025-12-01_8a43d16afd320aed17f45c08eca43742_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20251016-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2025-12-01_8a43d16afd320aed17f45c08eca43742_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11-20251015-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
upted1
C2
-
http://185.242.245.40
Attributes
-
url_path
/2cce982337eb4e69.php
rc4.plain
Targets
-
- Target 2025-12-01_8a43d16afd320aed17f45c08eca43742_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 648KB
- SHA256 89c776ff1a7a0880d1d50c3a66087c055cc0fa4e0db92ce7c2cebd2da24a089e
- MD5 8a43d16afd320aed17f45c08eca43742
- SHA1 c0f62f808871618da0accf45d6764898001616c8
- SHA512 b04bfd31b355e4317ad78d41fc3bd5d391f1b23629128442e861d7ef33600afe655e4d096d2e6d4a2d0a7b31a98d69b21abd3fcbe35686115c43695fb5a9ae14
- SSDEEP 12288:sSdGuEPgFaX2YPeynCHaD9BqTSv3YZtF15kjH0otVz:nEuE52YWynCC9kTG3ztV
- MD5 SHA1 SHA512 SSDEEP
Score3/10