General
- Target 2026-03-19_40f922d749367f42bbf5285983c75aad_amadey_avoslocker_cobalt-strike_cryptbot_elex_luca-stealer_lynx_njrat
- Size 864KB
- Sample260319-drkn5ag12l
- SHA256 8a0f70138815e8d6e4682afafc056a67993ad0222e2609551bbdf0a9f3191719
- MD5 40f922d749367f42bbf5285983c75aad
- SHA1 710aa56407aaab27da2f467779424cd0158cdb26
- SHA512 893b8f8429395b2e7fb2eb19a49251b956110ca18c836c2d9672c3bb4e10ebbe5836364abf829427d85384dc65ec1fe71b8ac839cd8332ffad8de02c9faf5934
- SSDEEP 24576:5ME9lCEUEtlfyKbdkuiXwZ/D1RxwOwlSjUEr8bbOEAg:5NnD7ZkuNh94EQbbfAg
- TLSH T16F159E82FFD250B0EBD2217011F357F60E3576199B2099DFD2902E669A216F27A3B70D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-03-19_40f922d749367f42bbf5285983c75aad_amadey_avoslocker_cobalt-strike_cryptbot_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-03-19_40f922d749367f42bbf5285983c75aad_amadey_avoslocker_cobalt-strike_cryptbot_elex_luca-stealer_lynx_njrat.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
cryptbot
C2
-
remkdi35.top
-
morkqz03.top
Attributes
-
payload_url
http://sulejx04.top/download.php?file=lv.exe
Targets
-
- Target 2026-03-19_40f922d749367f42bbf5285983c75aad_amadey_avoslocker_cobalt-strike_cryptbot_elex_luca-stealer_lynx_njrat
- Size 864KB
- SHA256 8a0f70138815e8d6e4682afafc056a67993ad0222e2609551bbdf0a9f3191719
- MD5 40f922d749367f42bbf5285983c75aad
- SHA1 710aa56407aaab27da2f467779424cd0158cdb26
- SHA512 893b8f8429395b2e7fb2eb19a49251b956110ca18c836c2d9672c3bb4e10ebbe5836364abf829427d85384dc65ec1fe71b8ac839cd8332ffad8de02c9faf5934
- SSDEEP 24576:5ME9lCEUEtlfyKbdkuiXwZ/D1RxwOwlSjUEr8bbOEAg:5NnD7ZkuNh94EQbbfAg
- TLSH T16F159E82FFD250B0EBD2217011F357F60E3576199B2099DFD2902E669A216F27A3B70D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10