General
- Target 2026-07-03_cbe50d10f9aa869ac0725133e1bb5380_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 260KB
- Sample260703-jktlcads9z
- SHA256 2928caa9f3e2cdeffeccb73f3056109ad67ab02010693a589ba80932e408be15
- MD5 cbe50d10f9aa869ac0725133e1bb5380
- SHA1 1861659dfb91be2b909964070b51edc041b7fcab
- SHA512 a732bf8f6b3b3e701726f5c692d9dbb893e0332a71b2e02a1c6bdb786f619d173fe71287a8b75cc8b90b393f30a4c06ca587113dc8666dc6466509ea4077e6a3
- SSDEEP 6144:Qj2H8xpP4pRf5N8w1vnj5pEsJscAOugnvVbg:QjhxpP4pRf5xTPQ0
- TLSH T1D344AF11B9D28473D5B211330978E7769A3D79300B2559EB73D81E3EDE302C1AA34E7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_cbe50d10f9aa869ac0725133e1bb5380_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_cbe50d10f9aa869ac0725133e1bb5380_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_cbe50d10f9aa869ac0725133e1bb5380_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 260KB
- SHA256 2928caa9f3e2cdeffeccb73f3056109ad67ab02010693a589ba80932e408be15
- MD5 cbe50d10f9aa869ac0725133e1bb5380
- SHA1 1861659dfb91be2b909964070b51edc041b7fcab
- SHA512 a732bf8f6b3b3e701726f5c692d9dbb893e0332a71b2e02a1c6bdb786f619d173fe71287a8b75cc8b90b393f30a4c06ca587113dc8666dc6466509ea4077e6a3
- SSDEEP 6144:Qj2H8xpP4pRf5N8w1vnj5pEsJscAOugnvVbg:QjhxpP4pRf5xTPQ0
- TLSH T1D344AF11B9D28473D5B211330978E7769A3D79300B2559EB73D81E3EDE302C1AA34E7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Drops startup file
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.