General
- Target 2026-07-10_06c0498447552ca4349f7206ac3779c3_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 221KB
- Sample260710-mrdegsh12r
- SHA256 46520ceeff4fc35bca7a833398efc95618ad7c37f2eb571a9e04e551b07a41d6
- MD5 06c0498447552ca4349f7206ac3779c3
- SHA1 a5b23730ab1d1fafc480f1dac434c8c59b4aa834
- SHA512 d0c8eedf14445422e2ce4851b0f48e635d4ef9fddaedaa8029229775da2c548eb7bde11cfb895cc2df7d3aa60cbfd7aefe02023945c789e85f273903d458b585
- SSDEEP 3072:k6PyTuv5ja67vVL3/LPc7WR86oLe1YeJNevvYGP1mn2Zs7V2qNC2GzyP9qfpx:dhaILPA6smYeXyYS1mn33xY
- TLSH T191247D10B941C036D973583A49BA8F7A9A2DBC904B5465CFA3C41DFECE306E0BB3565B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_06c0498447552ca4349f7206ac3779c3_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_06c0498447552ca4349f7206ac3779c3_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_06c0498447552ca4349f7206ac3779c3_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 221KB
- SHA256 46520ceeff4fc35bca7a833398efc95618ad7c37f2eb571a9e04e551b07a41d6
- MD5 06c0498447552ca4349f7206ac3779c3
- SHA1 a5b23730ab1d1fafc480f1dac434c8c59b4aa834
- SHA512 d0c8eedf14445422e2ce4851b0f48e635d4ef9fddaedaa8029229775da2c548eb7bde11cfb895cc2df7d3aa60cbfd7aefe02023945c789e85f273903d458b585
- SSDEEP 3072:k6PyTuv5ja67vVL3/LPc7WR86oLe1YeJNevvYGP1mn2Zs7V2qNC2GzyP9qfpx:dhaILPA6smYeXyYS1mn33xY
- TLSH T191247D10B941C036D973583A49BA8F7A9A2DBC904B5465CFA3C41DFECE306E0BB3565B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE