General
- Target 2026-05-04_4df5e469360aec25f96626596ab4d24c_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 412KB
- Sample260504-llbs2afw4x
- SHA256 d501fd0f0955cfd3ced83716ad4f6fd0e421a86dcdacc798e220cfedd612988b
- MD5 4df5e469360aec25f96626596ab4d24c
- SHA1 430d9d72b92049860d49fe7279db5c8430fb96d3
- SHA512 01c0a671d8662aa9c83786812f59a43e1c21bb17ac239fa2767abe4b46b2a6e7589390c7a5bd464e9e18051a7338a6bd9648cc98f2f7e2bf2bfab3344707e021
- SSDEEP 6144:rVn6rsDxy0DJ5NWTAPxKF+ibYIDgURu6rFcnrEmxqdGGjKFRseG8AO2nvztp4:rVn6rsDx/DNsFt5Q6rF0rVetp4
- TLSH T1A4944C213817C032D56091715E7AFFF685AD6D268B7149DBBBC40E375A202D2AE31F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-04_4df5e469360aec25f96626596ab4d24c_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-04_4df5e469360aec25f96626596ab4d24c_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_4df5e469360aec25f96626596ab4d24c_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 412KB
- SHA256 d501fd0f0955cfd3ced83716ad4f6fd0e421a86dcdacc798e220cfedd612988b
- MD5 4df5e469360aec25f96626596ab4d24c
- SHA1 430d9d72b92049860d49fe7279db5c8430fb96d3
- SHA512 01c0a671d8662aa9c83786812f59a43e1c21bb17ac239fa2767abe4b46b2a6e7589390c7a5bd464e9e18051a7338a6bd9648cc98f2f7e2bf2bfab3344707e021
- SSDEEP 6144:rVn6rsDxy0DJ5NWTAPxKF+ibYIDgURu6rFcnrEmxqdGGjKFRseG8AO2nvztp4:rVn6rsDx/DNsFt5Q6rF0rVetp4
- TLSH T1A4944C213817C032D56091715E7AFFF685AD6D268B7149DBBBC40E375A202D2AE31F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE