General
- Target 2026-04-26_80c4af13135c5e1267b080d9861963a8_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat
- Size 161KB
- Sample260426-e9qtjadw3v
- SHA256 8139ad5be3ec6d3b6b0e5c9483a1150575cc88df3c989d1f709ad6509f49962d
- MD5 80c4af13135c5e1267b080d9861963a8
- SHA1 1178b459860357ecd7fb025caefb2857d65d530f
- SHA512 35fed4160a4f22f1ead970db4496a523eef584fb09fbb8ec856d7f4e054be0e4f405a51103953683ffd884ad31cb4b44d93cb7071fc5b26348d68cd85b419e1e
- SSDEEP 3072:qHWQ0eRqhcYjpDftOVh3Wo/L5fhv9T5qJijUp2D82b2YLeqc09eaDPdDogi8EDpV:qHW0qEVh3Wojph//jUwA2bdeqHeGd8qu
- TLSH T1A7F38C01BC91C072E52315315975EA625ABD7E301FB0EE9BA7840B394F702C29636EBF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-04-26_80c4af13135c5e1267b080d9861963a8_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-26_80c4af13135c5e1267b080d9861963a8_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
Resource
win11-20260130-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-26_80c4af13135c5e1267b080d9861963a8_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat
- Size 161KB
- SHA256 8139ad5be3ec6d3b6b0e5c9483a1150575cc88df3c989d1f709ad6509f49962d
- MD5 80c4af13135c5e1267b080d9861963a8
- SHA1 1178b459860357ecd7fb025caefb2857d65d530f
- SHA512 35fed4160a4f22f1ead970db4496a523eef584fb09fbb8ec856d7f4e054be0e4f405a51103953683ffd884ad31cb4b44d93cb7071fc5b26348d68cd85b419e1e
- SSDEEP 3072:qHWQ0eRqhcYjpDftOVh3Wo/L5fhv9T5qJijUp2D82b2YLeqc09eaDPdDogi8EDpV:qHW0qEVh3Wojph//jUwA2bdeqHeGd8qu
- TLSH T1A7F38C01BC91C072E52315315975EA625ABD7E301FB0EE9BA7840B394F702C29636EBF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.