General
- Target 2026-06-28_9d2ce5c887254cd6a6e1d423fcac5c60_amadey_cobalt-strike_coinminer_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 502KB
- Sample260628-y3st4ad18p
- SHA256 bb17a86299792a3065171caa6e249902e653f8ea328ce4cf762e78842e4aa872
- MD5 9d2ce5c887254cd6a6e1d423fcac5c60
- SHA1 1e0fafd06f9ed2e0cab336456dcdae2bc737df03
- SHA512 445d87e8c1dbb46d5a8b4327e39a9f2869564c808fc53c837503edfd89a00f4457eb35e037e63afcea853ed5f3c09cda8e6f0dfcfe3d61bc2070d851b665c972
- SSDEEP 6144:UdVfjmNmIIIIIOjpHlFs5qD35wAbCoY8jImKw8bmiAf/KnAOyQL51AXlSb72a6GF:k7+1kHc5EAoHjxKw6wKnoUx2PtgWY
- TLSH T196B48DA1F944D132D86145305D38EFB5953DADA13FB441EBB3D83AAE4D303D22E72A26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_9d2ce5c887254cd6a6e1d423fcac5c60_amadey_cobalt-strike_coinminer_elex_hijackloader_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_9d2ce5c887254cd6a6e1d423fcac5c60_amadey_cobalt-strike_coinminer_elex_hijackloader_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_9d2ce5c887254cd6a6e1d423fcac5c60_amadey_cobalt-strike_coinminer_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 502KB
- SHA256 bb17a86299792a3065171caa6e249902e653f8ea328ce4cf762e78842e4aa872
- MD5 9d2ce5c887254cd6a6e1d423fcac5c60
- SHA1 1e0fafd06f9ed2e0cab336456dcdae2bc737df03
- SHA512 445d87e8c1dbb46d5a8b4327e39a9f2869564c808fc53c837503edfd89a00f4457eb35e037e63afcea853ed5f3c09cda8e6f0dfcfe3d61bc2070d851b665c972
- SSDEEP 6144:UdVfjmNmIIIIIOjpHlFs5qD35wAbCoY8jImKw8bmiAf/KnAOyQL51AXlSb72a6GF:k7+1kHc5EAoHjxKw6wKnoUx2PtgWY
- TLSH T196B48DA1F944D132D86145305D38EFB5953DADA13FB441EBB3D83AAE4D303D22E72A26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.