General
- Target 2026-04-18_7850f49ddff6c7777e932dbe62fcb664_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat
- Size 727KB
- Sample260418-e3sdsaaw9j
- SHA256 3f3f531257d9328276a9810aa1941fc7816029e9fb682a1796143dea9f144cbe
- MD5 7850f49ddff6c7777e932dbe62fcb664
- SHA1 36930deccd53b642e1e53b4704b85b2cfdcd6e34
- SHA512 eb11a834a284ac5cfc72e929c1f6874cb4b11ce84b6733b61658c24d67d4afc922cd72f76d4258edb5ed167248695e637130367d86302117bf938512dedc19a5
- SSDEEP 12288:q238IW5zxDWLJy5KZRw70SDBiKBox/x+V/hQbYDXbRaPYApy+ea2wSFzNka0EB5c:qzIW5zxDWKK4HV/hQbYDLnApy+ea2wSe
- TLSH T1F7F49D81FBC310F2D6C3117552B767BA1E3A2E029702EDD3C2942E6559216E2AE3F74D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-18_7850f49ddff6c7777e932dbe62fcb664_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-18_7850f49ddff6c7777e932dbe62fcb664_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-18_7850f49ddff6c7777e932dbe62fcb664_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat
- Size 727KB
- SHA256 3f3f531257d9328276a9810aa1941fc7816029e9fb682a1796143dea9f144cbe
- MD5 7850f49ddff6c7777e932dbe62fcb664
- SHA1 36930deccd53b642e1e53b4704b85b2cfdcd6e34
- SHA512 eb11a834a284ac5cfc72e929c1f6874cb4b11ce84b6733b61658c24d67d4afc922cd72f76d4258edb5ed167248695e637130367d86302117bf938512dedc19a5
- SSDEEP 12288:q238IW5zxDWLJy5KZRw70SDBiKBox/x+V/hQbYDXbRaPYApy+ea2wSFzNka0EB5c:qzIW5zxDWKK4HV/hQbYDLnApy+ea2wSe
- TLSH T1F7F49D81FBC310F2D6C3117552B767BA1E3A2E029702EDD3C2942E6559216E2AE3F74D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.