General
- Target 2026-06-30_42f1d69ee431632ae12e209010f3017b_amadey_cobalt-strike_darkgate_elex_glassworm_luca-stealer_lynx_njrat
- Size 833KB
- Sample260630-23cdwsbv2w
- SHA256 19826a2f23fdd5a5ad5df956d92fc4a75075e58298dea6d976ff02a8732ea1c3
- MD5 42f1d69ee431632ae12e209010f3017b
- SHA1 a9800a0705a6a23d2c0da371aed068ddab17faa0
- SHA512 2bc3f00901748b9cef035cb145fe4b48c9e12188836e2cdc39af58fa5b08dd140fc3886f5eabcbd8779270bc6ad4ae06c6dd714940685961ae7fe3dba42cc597
- SSDEEP 12288:PBhA3SfDkVs+k3mI62ATai/QqzlFCl7yZVrLnJtZsbTTeIhcUXeLYhnRY:5iifDk0/AT71Cl7UpsX2UXoqR
- TLSH T1C1059E02B6D18471F192017A0A3BF77E6E3DB1105B25C9C7C3E4D99859622E2EA3F35E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-30_42f1d69ee431632ae12e209010f3017b_amadey_cobalt-strike_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_42f1d69ee431632ae12e209010f3017b_amadey_cobalt-strike_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
encoder/shikata_ga_nai
Extracted
Family
-
metasploit
Version
-
windows/shell_reverse_tcp
C2
-
192.168.0.242:443
Targets
-
- Target 2026-06-30_42f1d69ee431632ae12e209010f3017b_amadey_cobalt-strike_darkgate_elex_glassworm_luca-stealer_lynx_njrat
- Size 833KB
- SHA256 19826a2f23fdd5a5ad5df956d92fc4a75075e58298dea6d976ff02a8732ea1c3
- MD5 42f1d69ee431632ae12e209010f3017b
- SHA1 a9800a0705a6a23d2c0da371aed068ddab17faa0
- SHA512 2bc3f00901748b9cef035cb145fe4b48c9e12188836e2cdc39af58fa5b08dd140fc3886f5eabcbd8779270bc6ad4ae06c6dd714940685961ae7fe3dba42cc597
- SSDEEP 12288:PBhA3SfDkVs+k3mI62ATai/QqzlFCl7yZVrLnJtZsbTTeIhcUXeLYhnRY:5iifDk0/AT71Cl7UpsX2UXoqR
- TLSH T1C1059E02B6D18471F192017A0A3BF77E6E3DB1105B25C9C7C3E4D99859622E2EA3F35E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.