2026-07-21_eff9592032baea8fbc35be65af906b72_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-21_eff9592032baea8fbc35be65af906b72_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
Size 536KB
Sample260721-bedzpscv5w
SHA256 f8aea3eae843472348180b8a9a0e1d9168028d9598899c74552338c85d01de9b
MD5 eff9592032baea8fbc35be65af906b72
SHA1 1b6e6d08cf5feea8f68dd6522b10052e86a718f9
SHA512 2311ac6702d8b9f3eb624f1ba5086cd1a37925301b60b8a4e1307a2f10ebaacbce658a5f95bb84d955db7d3c300f5fd7cd716e591a51d1bffb299bcbf6e4beca
SSDEEP 6144:85FpEdFPYcjDVUs+ohGFLPphtC5iyr5LFQfz1pYII+IJrLGDGHl0fmeAO8ojqqDb:q+bYc9UhVhtC5Hr5LFg9WJl3eaqnuDR
TLSH
T145C4AF01B591C472C06310311EA6DF728B7CE9600B258EDBB3D45EB95F783D29A3B79A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-21_eff9592032baea8fbc35be65af906b72_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader

File Explorer

2026-07-21_eff9592032baea8fbc35be65af906b72_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader

.exe 536KB

2026-07-21_eff9592032baea8fbc35be65af906b72_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader

IMPHASH 62c5843365159691b294aa1fcea9e883
SHA256 f8aea3eae843472348180b8a9a0e1d9168028d9598899c74552338c85d01de9b
MD5 eff9592032baea8fbc35be65af906b72
SHA1 1b6e6d08cf5feea8f68dd6522b10052e86a718f9
SHA512 2311ac6702d8b9f3eb624f1ba5086cd1a37925301b60b8a4e1307a2f10ebaacbce658a5f95bb84d955db7d3c300f5fd7cd716e591a51d1bffb299bcbf6e4beca
SSDEEP 6144:85FpEdFPYcjDVUs+ohGFLPphtC5iyr5LFQfz1pYII+IJrLGDGHl0fmeAO8ojqqDb:q+bYc9UhVhtC5Hr5LFg9WJl3eaqnuDR
TLSH
T145C4AF01B591C472C06310311EA6DF728B7CE9600B258EDBB3D45EB95F783D29A3B79A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

151431

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ws2_32

recvfrom WSAGetLastError WSACleanup WSAStartup gethostname gethostbyname socket setsockopt sendto inet_addr ntohs htons getsockname ioctlsocket bind closesocket inet_ntoa

comctl32

ord17

kernel32

FindNextFileW FindFirstFileExW FindClose FlushFileBuffers GetConsoleOutputCP ReadConsoleW IsValidCodePage GetACP QueryPerformanceCounter QueryPerformanceFrequency CloseHandle SetWaitableTimer CreateWaitableTimerA Sleep InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection ExitProcess GetStdHandle CreateThread AllocConsole SetConsoleMode ReadConsoleA SetConsoleCtrlHandler FlushConsoleInputBuffer SetConsoleTitleA GetTickCount GetLocalTime TerminateThread GetModuleHandleA GetModuleFileNameA GetConsoleWindow MulDiv lstrlenA GetCommandLineA GetConsoleMode GetOEMCP GetFileSizeEx EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW VirtualProtect HeapReAlloc HeapAlloc HeapFree WriteFile GetModuleFileNameW GetFileType SetStdHandle ReadFile GetModuleHandleExW FreeLibraryAndExitThread ExitThread LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc SetLastError GetLastError RaiseException RtlUnwind TerminateProcess GetCurrentProcess InitializeSListHead GetCurrentProcessId GetStartupInfoW SetUnhandledExceptionFilter GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap CreateFileW HeapSize SetEndOfFile SetFilePointerEx WaitForSingleObjectEx GetCurrentThreadId InitializeCriticalSectionEx WriteConsoleW FlsAlloc FlsGetValue FlsSetValue FlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetStringTypeW GetCPInfo InitializeCriticalSectionAndSpinCount SetEvent ResetEvent CreateEventW IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter

user32

MessageBoxA SystemParametersInfoA IsDialogMessageA GetWindow GetParent GetWindowLongA DrawFocusRect MapWindowPoints GetWindowTextLengthA RedrawWindow ReleaseDC GetDC GetKeyState GetFocus SetFocus EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPos LoadIconA LoadCursorA GetWindowRect GetClientRect GetWindowTextA EndPaint BeginPaint SetForegroundWindow UpdateWindow DrawTextA GetDlgItem ShowWindow wsprintfA RegisterClassExA PostQuitMessage DefWindowProcA DispatchMessageA TranslateMessage GetMessageA DestroyWindow UnregisterClassA SetWindowTextA SendMessageA CreateWindowExA

gdi32

SetTextColor SetBkColor GetDeviceCaps GetTextMetricsA SelectObject DeleteDC CreateFontA CreateCompatibleDC DeleteObject ExtTextOutA

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-21_eff9592032baea8fbc35be65af906b72_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader

ws2_32

comctl32

kernel32

user32

gdi32

generic