General
- Target 2026-04-21_98d7152e03625cd1ecf098f6561c70b3_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat
- Size 129KB
- Sample260421-ev9yvsbv7x
- SHA256 a6f06336da8b130bedc24fbdc78b649e1bf6d8608fe66e855fad7e83f67f11c0
- MD5 98d7152e03625cd1ecf098f6561c70b3
- SHA1 682fbb3a182b54592b1094f06b31d15e093a0332
- SHA512 7efdd43cbc1891e88104cec8d38008149b5b657124abfa851920c805a16c7c9d2ad59c47f6b79b13c8edaa9f9ac97f22326db753838bc3815fccb96e7d07474d
- SSDEEP 3072:451dkqeI3cJyNS1i+5FZt+gaPHfYemZ9E/vhT0M3RFiH:4micJiS1zTDdMLmWKaFiH
- TLSH T111D3AE06B8C1C072D5763A311534DBB1AE7EF8300F54AE5B7798067A5F306C18A7AE6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-21_98d7152e03625cd1ecf098f6561c70b3_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-21_98d7152e03625cd1ecf098f6561c70b3_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-21_98d7152e03625cd1ecf098f6561c70b3_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat
- Size 129KB
- SHA256 a6f06336da8b130bedc24fbdc78b649e1bf6d8608fe66e855fad7e83f67f11c0
- MD5 98d7152e03625cd1ecf098f6561c70b3
- SHA1 682fbb3a182b54592b1094f06b31d15e093a0332
- SHA512 7efdd43cbc1891e88104cec8d38008149b5b657124abfa851920c805a16c7c9d2ad59c47f6b79b13c8edaa9f9ac97f22326db753838bc3815fccb96e7d07474d
- SSDEEP 3072:451dkqeI3cJyNS1i+5FZt+gaPHfYemZ9E/vhT0M3RFiH:4micJiS1zTDdMLmWKaFiH
- TLSH T111D3AE06B8C1C072D5763A311534DBB1AE7EF8300F54AE5B7798067A5F306C18A7AE6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Drops desktop.ini file(s)