General
- Target 2026-07-16_1248f7cd872029e61f3efe0a67267201_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_metamorfo_njrat_smoke-loader
- Size 904KB
- Sample260716-mdr1qaat9j
- SHA256 7457c2a142af677e21582853a72ce80d5d4acad3be8a73a4bda443d966abb39d
- MD5 1248f7cd872029e61f3efe0a67267201
- SHA1 97bc2e325f3d24f75b043f3ea72a05234eb51746
- SHA512 eeb14371073ec2c688db6635c3d4eac9f819225645d069d1569589828b3bafdf3733aeb136c6ebb16989db5f153dca1196bf66cad2fd4c6bc23a745028b645fa
- SSDEEP 12288:WOOEgrRcM4beYS7mJ9IW+/jZ+sOHF40JbWHlubpIyKaEEqzWdc1nSEyaEf4fE1n1:WOODOMfzujJbWHsKaJvq1nSEDgnvlDj
- TLSH T187157D31B082C03AE46202B115A8DBBA957DF9350BB649DBA7D41F7E4E241D25F32E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-16_1248f7cd872029e61f3efe0a67267201_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_met.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_1248f7cd872029e61f3efe0a67267201_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_met.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_1248f7cd872029e61f3efe0a67267201_amadey_cobalt-strike_darkgate_elex_luca-stealer_lynx_metamorfo_njrat_smoke-loader
- Size 904KB
- SHA256 7457c2a142af677e21582853a72ce80d5d4acad3be8a73a4bda443d966abb39d
- MD5 1248f7cd872029e61f3efe0a67267201
- SHA1 97bc2e325f3d24f75b043f3ea72a05234eb51746
- SHA512 eeb14371073ec2c688db6635c3d4eac9f819225645d069d1569589828b3bafdf3733aeb136c6ebb16989db5f153dca1196bf66cad2fd4c6bc23a745028b645fa
- SSDEEP 12288:WOOEgrRcM4beYS7mJ9IW+/jZ+sOHF40JbWHlubpIyKaEEqzWdc1nSEyaEf4fE1n1:WOODOMfzujJbWHsKaJvq1nSEDgnvlDj
- TLSH T187157D31B082C03AE46202B115A8DBBA957DF9350BB649DBA7D41F7E4E241D25F32E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003)
-
Deletes itself
-
Executes dropped EXE
-
Adds Run key to start application