General
- Target 2026-07-06_845049ee32bd45e8f886e6d26242d742_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-stealer_lynx_njrat_smoke-loader
- Size 309KB
- Sample260707-c3agvsgs2y
- SHA256 b07eecbd94d729762cc7e9d20ea6133d66bee11186982ae35158fe398d14d81a
- MD5 845049ee32bd45e8f886e6d26242d742
- SHA1 213ccdea02f50e0301ba6b87e72a821aa434f6b9
- SHA512 759eb415a3da53304f4a25a2d9f9031fffafda1127ce468af7e83df0d74bbc62cce6b6be3ddf026d96d225da190801fc7c113a9ce86cf9b2c52f83cea3b1119b
- SSDEEP 6144:bnmDn7RwxuybHGybMb3Q/W7Gj4NlToKeJvxZOr:bnm77yuyzGybMFNNlZWvx4r
- TLSH T19164BF52F8C08472C527183315A4CF715A3EBC7559908A8FA3A93A39DF733C1562A9EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_845049ee32bd45e8f886e6d26242d742_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-ste.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_845049ee32bd45e8f886e6d26242d742_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-ste.exe
Resource
win11ltsc2024-20260706-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_845049ee32bd45e8f886e6d26242d742_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-stealer_lynx_njrat_smoke-loader
- Size 309KB
- SHA256 b07eecbd94d729762cc7e9d20ea6133d66bee11186982ae35158fe398d14d81a
- MD5 845049ee32bd45e8f886e6d26242d742
- SHA1 213ccdea02f50e0301ba6b87e72a821aa434f6b9
- SHA512 759eb415a3da53304f4a25a2d9f9031fffafda1127ce468af7e83df0d74bbc62cce6b6be3ddf026d96d225da190801fc7c113a9ce86cf9b2c52f83cea3b1119b
- SSDEEP 6144:bnmDn7RwxuybHGybMb3Q/W7Gj4NlToKeJvxZOr:bnm77yuyzGybMFNNlZWvx4r
- TLSH T19164BF52F8C08472C527183315A4CF715A3EBC7559908A8FA3A93A39DF733C1562A9EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.