General
- Target 2026-05-22_f1705a28c09b8e4ebdcacd4b523cd941_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 896KB
- Sample260522-psl45abs4k
- SHA256 c97f9e65b1f9aa063fbd8c73a92910bce09b132923b75c6deffe93e450b3e209
- MD5 f1705a28c09b8e4ebdcacd4b523cd941
- SHA1 b48dbcb9a5dd9fa4f6d578e3b988ac823b310af7
- SHA512 a3c2f3f56d8323081ce1ccbd6e161c00412997157c2b8618a4ef2969e3ba3af100cc9708912825868862f88c0d2fd865610cb42128ef06db34ce7585dd664983
- SSDEEP 12288:mDb22DShTEe+yuyzGybMFNNluDb22DShTEe+yuyzGybMFNNl1:EK2eTEe+YBMFNNGK2eTEe+YBMFNNn
- TLSH T10915E016B8C18072D472343202619BB55B3EF83021A99ACF87591D76EF726D19B3A3DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-05-22_f1705a28c09b8e4ebdcacd4b523cd941_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_f1705a28c09b8e4ebdcacd4b523cd941_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_f1705a28c09b8e4ebdcacd4b523cd941_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 896KB
- SHA256 c97f9e65b1f9aa063fbd8c73a92910bce09b132923b75c6deffe93e450b3e209
- MD5 f1705a28c09b8e4ebdcacd4b523cd941
- SHA1 b48dbcb9a5dd9fa4f6d578e3b988ac823b310af7
- SHA512 a3c2f3f56d8323081ce1ccbd6e161c00412997157c2b8618a4ef2969e3ba3af100cc9708912825868862f88c0d2fd865610cb42128ef06db34ce7585dd664983
- SSDEEP 12288:mDb22DShTEe+yuyzGybMFNNluDb22DShTEe+yuyzGybMFNNl1:EK2eTEe+YBMFNNGK2eTEe+YBMFNNn
- TLSH T10915E016B8C18072D472343202619BB55B3EF83021A99ACF87591D76EF726D19B3A3DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.