General
- Target 2026-07-02_1a96e59814e6fa5098cab56ec0c446a6_amadey_cobalt-strike_coinminer_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 652KB
- Sample260702-ebp5cabw5x
- SHA256 c2b3357020f876e6c4242b5f86bb996f9fc9aa93e830f16f63b7217ba0a016c6
- MD5 1a96e59814e6fa5098cab56ec0c446a6
- SHA1 6b8c933b1d1419f0fc6b9ff905793a8cba7a516c
- SHA512 e6ab07f80008d291d03251fdc7b1f82e7972c9aa14eb778fbd3de0c1bd68b83e0eaece13b5d0a7f01907b5ac22f136e9b3819662099f457848f31dedc532c44b
- SSDEEP 6144:gL5EgOM9dVfjmNXKIIIIIOjpHlFs5qD35wAbCoY8jImKw8bmiAf/KnAOyQL51AXU:6Eg17+JkHc5EAoHjxKw6wKnoUx2PtgWY
- TLSH T1D8E48CA1F940D432D46145305D28EBB9A53DBDB02F6445EBB3DC3EAE4F313D22A36626
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_1a96e59814e6fa5098cab56ec0c446a6_amadey_cobalt-strike_coinminer_elex_hijackloader_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_1a96e59814e6fa5098cab56ec0c446a6_amadey_cobalt-strike_coinminer_elex_hijackloader_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_1a96e59814e6fa5098cab56ec0c446a6_amadey_cobalt-strike_coinminer_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 652KB
- SHA256 c2b3357020f876e6c4242b5f86bb996f9fc9aa93e830f16f63b7217ba0a016c6
- MD5 1a96e59814e6fa5098cab56ec0c446a6
- SHA1 6b8c933b1d1419f0fc6b9ff905793a8cba7a516c
- SHA512 e6ab07f80008d291d03251fdc7b1f82e7972c9aa14eb778fbd3de0c1bd68b83e0eaece13b5d0a7f01907b5ac22f136e9b3819662099f457848f31dedc532c44b
- SSDEEP 6144:gL5EgOM9dVfjmNXKIIIIIOjpHlFs5qD35wAbCoY8jImKw8bmiAf/KnAOyQL51AXU:6Eg17+JkHc5EAoHjxKw6wKnoUx2PtgWY
- TLSH T1D8E48CA1F940D432D46145305D28EBB9A53DBDB02F6445EBB3DC3EAE4F313D22A36626
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.