General
- Target 2026-05-11_95aa88c4be65b9d2bcdcddf3b16d77b1_amadey_cobalt-strike_darkgate_elex_luca-stealer_njrat_smoke-loader
- Size 839KB
- Sample260511-shlbmacz5s
- SHA256 21026f6309773e45145a0fe52a2adb7dabfecfc6f73e23aa0432f742b4533f33
- MD5 95aa88c4be65b9d2bcdcddf3b16d77b1
- SHA1 7c0b8238210fbaddc433f4028944c7c86375450c
- SHA512 7992433cbe9b69a49b7cb29e2ae78fd739b169a99825c6d3ff2b3ab3b3b87830eb2f4bf690f6006d4aec1593c9215885c52c5a9b3292ced313d51c563cf5ccb2
- SSDEEP 24576:B5hVZ2zEYytjjqNSlhvpfQiIhKPtehfQwr9qySkbged:HZPtjtQiIhUyQy1SkFd
- TLSH T1A305AE12B592C033E06211B15978ABB6997EBD340B3195DB67C80F5D4E345C2AF3AB3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-11_95aa88c4be65b9d2bcdcddf3b16d77b1_amadey_cobalt-strike_darkgate_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_95aa88c4be65b9d2bcdcddf3b16d77b1_amadey_cobalt-strike_darkgate_elex_luca-stealer_njrat_smoke-loader
- Size 839KB
- SHA256 21026f6309773e45145a0fe52a2adb7dabfecfc6f73e23aa0432f742b4533f33
- MD5 95aa88c4be65b9d2bcdcddf3b16d77b1
- SHA1 7c0b8238210fbaddc433f4028944c7c86375450c
- SHA512 7992433cbe9b69a49b7cb29e2ae78fd739b169a99825c6d3ff2b3ab3b3b87830eb2f4bf690f6006d4aec1593c9215885c52c5a9b3292ced313d51c563cf5ccb2
- SSDEEP 24576:B5hVZ2zEYytjjqNSlhvpfQiIhKPtehfQwr9qySkbged:HZPtjtQiIhUyQy1SkFd
- TLSH T1A305AE12B592C033E06211B15978ABB6997EBD340B3195DB67C80F5D4E345C2AF3AB3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1