General
- Target 2026-06-27_d03eae913a5cd1a22235b706f0cea3ce_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 882KB
- Sample260629-c6d98acw3q
- SHA256 6206a5c274fe6c972c27c3719989a4fa43fb14742693795c3c0ca6cba9439ed6
- MD5 d03eae913a5cd1a22235b706f0cea3ce
- SHA1 c2715b1ed78115a9ea8cffbb787c72de80bc7d2d
- SHA512 e2bab3437fcf3c545bbe1d0200a8f5e356c196c7356f099b089210737c85a90f5216d0dcfc703764eacad70ca581c9d6b4cc7a098ed5ab023f00bbe7ce529f67
- SSDEEP 12288:H7+M4R82PWuZKUK1kWJA+Jf2+9zkouCHVeQrTSRXyG:H7A82PWuZKUKuWJRf2UY/Zr
- TLSH T162158D3178C09572DDE210B643FCBA3A82AED4B40B255ACF55D817FEE7106C16F3269A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_d03eae913a5cd1a22235b706f0cea3ce_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_d03eae913a5cd1a22235b706f0cea3ce_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260617-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_d03eae913a5cd1a22235b706f0cea3ce_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 882KB
- SHA256 6206a5c274fe6c972c27c3719989a4fa43fb14742693795c3c0ca6cba9439ed6
- MD5 d03eae913a5cd1a22235b706f0cea3ce
- SHA1 c2715b1ed78115a9ea8cffbb787c72de80bc7d2d
- SHA512 e2bab3437fcf3c545bbe1d0200a8f5e356c196c7356f099b089210737c85a90f5216d0dcfc703764eacad70ca581c9d6b4cc7a098ed5ab023f00bbe7ce529f67
- SSDEEP 12288:H7+M4R82PWuZKUK1kWJA+Jf2+9zkouCHVeQrTSRXyG:H7A82PWuZKUKuWJRf2UY/Zr
- TLSH T162158D3178C09572DDE210B643FCBA3A82AED4B40B255ACF55D817FEE7106C16F3269A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.