General
- Target 2026-07-02_a410b7f7e34a2bbc4e322ccd510fd6d5_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 662KB
- Sample260702-2jyssacw8n
- SHA256 8401ec0497bd351e66e13aea51ebf27045f3f02f0eb6a6ad1601cfb723af1cbe
- MD5 a410b7f7e34a2bbc4e322ccd510fd6d5
- SHA1 f7168467b59f59629931152ac1c061f9d71f1fc2
- SHA512 1a49bb501f9c0c24a4ac8d5127901226e8bc214dc6c81c8c9281da0c18694b1e5cd82ed11e32432928906c3fcf58e0f2b060d3681da7522959e8bfe4b485278a
- SSDEEP 12288:UDICy7rImQmYN3CuXQvOHgKuti/Tlbch5RhHplS:UDFErGhBnXEGhutMJbch5RBplS
- TLSH T144E449102AE981F6F6B35AB04A7B4D5DD97EB8614EF1D28BDFC44549D9F09808B30B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-02_a410b7f7e34a2bbc4e322ccd510fd6d5_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_a410b7f7e34a2bbc4e322ccd510fd6d5_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260630-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_a410b7f7e34a2bbc4e322ccd510fd6d5_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 662KB
- SHA256 8401ec0497bd351e66e13aea51ebf27045f3f02f0eb6a6ad1601cfb723af1cbe
- MD5 a410b7f7e34a2bbc4e322ccd510fd6d5
- SHA1 f7168467b59f59629931152ac1c061f9d71f1fc2
- SHA512 1a49bb501f9c0c24a4ac8d5127901226e8bc214dc6c81c8c9281da0c18694b1e5cd82ed11e32432928906c3fcf58e0f2b060d3681da7522959e8bfe4b485278a
- SSDEEP 12288:UDICy7rImQmYN3CuXQvOHgKuti/Tlbch5RhHplS:UDFErGhBnXEGhutMJbch5RBplS
- TLSH T144E449102AE981F6F6B35AB04A7B4D5DD97EB8614EF1D28BDFC44549D9F09808B30B23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.