General
- Target 2026-07-07_7098260cb47c4dcdb9206973ff21bde4_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 433KB
- Sample260707-jpye4ah19p
- SHA256 36d95c88b225dc90f08eb74f90193f52227354ee9dc57c1bc6f6f589f99552e2
- MD5 7098260cb47c4dcdb9206973ff21bde4
- SHA1 4d7d25728cd10d8d41c51adef7780b7107c7de85
- SHA512 5a4402d9fe15a5d33e003c01cbf444d7d3a8a2cf5adbddde771df8d46561d555aed7e25e476859a0a1537b22625bc201fc5888b366702e67cb9b664f4687c55a
- SSDEEP 12288:l/9kGPwCkbfqD0c9QjZ8aphjT02HEL8Wq14k:p9FPwCkbfeBkZ8x2k4Dm
- TLSH T174944B91B28280B3E4FF0D710A648955492DAEF0176544FB67A8386EDF747C36E3278E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_7098260cb47c4dcdb9206973ff21bde4_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_7098260cb47c4dcdb9206973ff21bde4_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_7098260cb47c4dcdb9206973ff21bde4_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 433KB
- SHA256 36d95c88b225dc90f08eb74f90193f52227354ee9dc57c1bc6f6f589f99552e2
- MD5 7098260cb47c4dcdb9206973ff21bde4
- SHA1 4d7d25728cd10d8d41c51adef7780b7107c7de85
- SHA512 5a4402d9fe15a5d33e003c01cbf444d7d3a8a2cf5adbddde771df8d46561d555aed7e25e476859a0a1537b22625bc201fc5888b366702e67cb9b664f4687c55a
- SSDEEP 12288:l/9kGPwCkbfqD0c9QjZ8aphjT02HEL8Wq14k:p9FPwCkbfeBkZ8x2k4Dm
- TLSH T174944B91B28280B3E4FF0D710A648955492DAEF0176544FB67A8386EDF747C36E3278E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.