General
- Target 2026-07-06_2e6b8b590898e0d08b437a9e57c6acab_amadey_cobalt-strike_elex_hijackloader_luca-stealer_lynx_njrat_smoke-loader_vidar
- Size 573KB
- Sample260706-sstezsg18s
- SHA256 067ce9c1f49ac9761944b398b84069e27f509e7d49c86b7e98a2fc94d71bbfa1
- MD5 2e6b8b590898e0d08b437a9e57c6acab
- SHA1 e4b51c5ace9c2dba7c8a60f19b7582db4027dced
- SHA512 125eaf01a117fa3d261512c5a3c889c44cf881cd3e2095e1436cbd4c1885eda173889dc517657ffa420ab3fafc314cb43e3bca3e146edbefd15414b33a40f4c7
- SSDEEP 12288:YemGz00vHyvTCXdXikLj2jR7trg6Qi3vYsKTqAj:7VI0vHyyLj8trn3wsqj
- TLSH T167C4BF2079A0C072D27301354D6AD794963EF6704F6289DB73D49EBE2F316C1FB286A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_2e6b8b590898e0d08b437a9e57c6acab_amadey_cobalt-strike_elex_hijackloader_luca-stealer_lynx.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_2e6b8b590898e0d08b437a9e57c6acab_amadey_cobalt-strike_elex_hijackloader_luca-stealer_lynx.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_2e6b8b590898e0d08b437a9e57c6acab_amadey_cobalt-strike_elex_hijackloader_luca-stealer_lynx_njrat_smoke-loader_vidar
- Size 573KB
- SHA256 067ce9c1f49ac9761944b398b84069e27f509e7d49c86b7e98a2fc94d71bbfa1
- MD5 2e6b8b590898e0d08b437a9e57c6acab
- SHA1 e4b51c5ace9c2dba7c8a60f19b7582db4027dced
- SHA512 125eaf01a117fa3d261512c5a3c889c44cf881cd3e2095e1436cbd4c1885eda173889dc517657ffa420ab3fafc314cb43e3bca3e146edbefd15414b33a40f4c7
- SSDEEP 12288:YemGz00vHyvTCXdXikLj2jR7trg6Qi3vYsKTqAj:7VI0vHyyLj8trn3wsqj
- TLSH T167C4BF2079A0C072D27301354D6AD794963EF6704F6289DB73D49EBE2F316C1FB286A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.