General
- Target 2026-07-23_c0c6ba6f8a7e4dfaefe68b82e8cbe924_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat
- Size 254KB
- Sample260723-3w34psdf64
- SHA256 4d9df4ae5489e38813e7fe2eacd1b0af2d1f1161d2390587a1aa59011b7fb9e5
- MD5 c0c6ba6f8a7e4dfaefe68b82e8cbe924
- SHA1 2593de200b6330ab159658abe31a8cd25e6ae244
- SHA512 dd7accf0df0dbce7e0312cceb61b1c4659b21da4172f7c1081d14c1160713d8f91440e7d31ae2c2c67906657ad641a29a35f4452f5edac76ec8a7d711161efc5
- SSDEEP 6144:WcCbvS3PdUOKrdhXhZVJPGSFgjUE0uS//bTAOUBS3:WzbvS3irdhRZVJ+SpTe
- TLSH T13344AF2175E2C472D47211324978DBB59A7EB9380F2597EBA3D41F3ECE302C1A731A66
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_c0c6ba6f8a7e4dfaefe68b82e8cbe924_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_c0c6ba6f8a7e4dfaefe68b82e8cbe924_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat
- Size 254KB
- SHA256 4d9df4ae5489e38813e7fe2eacd1b0af2d1f1161d2390587a1aa59011b7fb9e5
- MD5 c0c6ba6f8a7e4dfaefe68b82e8cbe924
- SHA1 2593de200b6330ab159658abe31a8cd25e6ae244
- SHA512 dd7accf0df0dbce7e0312cceb61b1c4659b21da4172f7c1081d14c1160713d8f91440e7d31ae2c2c67906657ad641a29a35f4452f5edac76ec8a7d711161efc5
- SSDEEP 6144:WcCbvS3PdUOKrdhXhZVJPGSFgjUE0uS//bTAOUBS3:WzbvS3irdhRZVJ+SpTe
- TLSH T13344AF2175E2C472D47211324978DBB59A7EB9380F2597EBA3D41F3ECE302C1A731A66
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE