General
- Target 2026-07-19_c53ce0956b6f133b81ba53cfb9b9784f_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_smoke-loader_wannacry
- Size 913KB
- Sample260720-aye6facy3y
- SHA256 479ec8efe2b214a3e90fdab401b64d061b3c577aa8d7986605fc97a00f142d80
- MD5 c53ce0956b6f133b81ba53cfb9b9784f
- SHA1 2034a93058b4b07bbde77839d78da407b776deb8
- SHA512 cd759cc771aed22b04153bb19fcd908ad3019ead3ce41ba49ceb061814f754f011a7216b7331039896b9976a0233edb9a473111a213b1a8d079ecb3533c5679c
- SSDEEP 24576:67DQGjXUPBVgmWXQN7Air45oAir45wNn+OZW:67vq0mWXQN7Ai05oAi054n+OZW
- TLSH T1C1157C013DA1A33EE061517049699B59506EACB61B2A44EB73C2FB3DD9333F25A31E37
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_c53ce0956b6f133b81ba53cfb9b9784f_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njra.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_c53ce0956b6f133b81ba53cfb9b9784f_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_smoke-loader_wannacry
- Size 913KB
- SHA256 479ec8efe2b214a3e90fdab401b64d061b3c577aa8d7986605fc97a00f142d80
- MD5 c53ce0956b6f133b81ba53cfb9b9784f
- SHA1 2034a93058b4b07bbde77839d78da407b776deb8
- SHA512 cd759cc771aed22b04153bb19fcd908ad3019ead3ce41ba49ceb061814f754f011a7216b7331039896b9976a0233edb9a473111a213b1a8d079ecb3533c5679c
- SSDEEP 24576:67DQGjXUPBVgmWXQN7Air45oAir45wNn+OZW:67vq0mWXQN7Ai05oAi054n+OZW
- TLSH T1C1157C013DA1A33EE061517049699B59506EACB61B2A44EB73C2FB3DD9333F25A31E37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.