2026-07-22_5eddd75e86dde69848b511dd4d136a2f_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

General

Target
2026-07-22_5eddd75e86dde69848b511dd4d136a2f_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat
Size 146KB
Sample260722-3ynrssxcke
SHA256 e27bbbd5158d2bdc849b6a014f3199b04f3002df6ea949f13dba0b971776b744
MD5 5eddd75e86dde69848b511dd4d136a2f
SHA1 78251596f54b8d52f9d409e90ff1515d1015c151
SHA512 12722a2369f073f7e0dd16dd8c9a9ef01ebf3690f115f55461050a7b0df13add920cbe386c0fcdd42577fa11e63b9c40b1e406ea2aa41a4dac756f577193634e
SSDEEP 3072:1TEGPo4dlgkRmaRyYhNhKaoKLJRtEoI8/eGzp3cn755HVXsBriR4E:xX5BRzlhroEtEF1n75j8B26E
TLSH
T13BE3AE02B1C08472E5B629361970DBA15E3DFC700F50AEAB63D81A7A5F306C1DA65DBB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-22_5eddd75e86dde69848b511dd4d136a2f_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

File Explorer

2026-07-22_5eddd75e86dde69848b511dd4d136a2f_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

.exe 146KB

2026-07-22_5eddd75e86dde69848b511dd4d136a2f_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

IMPHASH 09d2b65b5d06b78d08f1725c96e930bd
SHA256 e27bbbd5158d2bdc849b6a014f3199b04f3002df6ea949f13dba0b971776b744
MD5 5eddd75e86dde69848b511dd4d136a2f
SHA1 78251596f54b8d52f9d409e90ff1515d1015c151
SHA512 12722a2369f073f7e0dd16dd8c9a9ef01ebf3690f115f55461050a7b0df13add920cbe386c0fcdd42577fa11e63b9c40b1e406ea2aa41a4dac756f577193634e
SSDEEP 3072:1TEGPo4dlgkRmaRyYhNhKaoKLJRtEoI8/eGzp3cn755HVXsBriR4E:xX5BRzlhroEtEF1n75j8B26E
TLSH
T13BE3AE02B1C08472E5B629361970DBA15E3DFC700F50AEAB63D81A7A5F306C1DA65DBB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6673

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA DeleteFileA WriteFile GetTempPathA CloseHandle WaitForSingleObject ExitProcess CreateProcessA GetTickCount VirtualAlloc VirtualFree LoadResource LockResource SizeofResource FindResourceA CreateFileW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException GetStdHandle GetModuleFileNameW GetModuleHandleExW HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW LCMapStringW GetProcessHeap SetFilePointerEx HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode DecodePointer WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-22_5eddd75e86dde69848b511dd4d136a2f_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

kernel32

generic