General
- Target 2026-07-01_6fee9d9b51e239d2f26ffa449ee98260_amadey_cobalt-strike_elex_luca-stealer_njrat_play
- Size 119KB
- Sample260701-lfrx3acy5z
- SHA256 e47d12bdcf6166b28a3d6d66a228411e8ba0671ae37711d85774a2f4062606a7
- MD5 6fee9d9b51e239d2f26ffa449ee98260
- SHA1 a0341671ef3a548801462bb11f61c95f84c29c8f
- SHA512 f4bc99bd5e227f171027406176f146f094e58e8ab2c02ad2933ae119e9dc485b432c009ae34fc9a3f4e0c651c239861535b3949fa0e0663c0c81cb6298b1e727
- SSDEEP 3072:v5UeQgoG7TrmgbQKd9P6vdyDNvFmUfE9OOQl579JM+W6eOU/Z:aBzKGgcuPydyDmoAOJPb3KZ
- TLSH T186C37D01B4C2C872D5B6553109A4EFB64A7DF9300F609EDFA7C816BA9F342C09636E67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_6fee9d9b51e239d2f26ffa449ee98260_amadey_cobalt-strike_elex_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_6fee9d9b51e239d2f26ffa449ee98260_amadey_cobalt-strike_elex_luca-stealer_njrat_play.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_6fee9d9b51e239d2f26ffa449ee98260_amadey_cobalt-strike_elex_luca-stealer_njrat_play
- Size 119KB
- SHA256 e47d12bdcf6166b28a3d6d66a228411e8ba0671ae37711d85774a2f4062606a7
- MD5 6fee9d9b51e239d2f26ffa449ee98260
- SHA1 a0341671ef3a548801462bb11f61c95f84c29c8f
- SHA512 f4bc99bd5e227f171027406176f146f094e58e8ab2c02ad2933ae119e9dc485b432c009ae34fc9a3f4e0c651c239861535b3949fa0e0663c0c81cb6298b1e727
- SSDEEP 3072:v5UeQgoG7TrmgbQKd9P6vdyDNvFmUfE9OOQl579JM+W6eOU/Z:aBzKGgcuPydyDmoAOJPb3KZ
- TLSH T186C37D01B4C2C872D5B6553109A4EFB64A7DF9300F609EDFA7C816BA9F342C09636E67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.