2026-07-23_c0c6ba6f8a7e4dfaefe68b82e8cbe924_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-23_c0c6ba6f8a7e4dfaefe68b82e8cbe924_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat
Size 254KB
Sample260723-3w34psdf64
SHA256 4d9df4ae5489e38813e7fe2eacd1b0af2d1f1161d2390587a1aa59011b7fb9e5
MD5 c0c6ba6f8a7e4dfaefe68b82e8cbe924
SHA1 2593de200b6330ab159658abe31a8cd25e6ae244
SHA512 dd7accf0df0dbce7e0312cceb61b1c4659b21da4172f7c1081d14c1160713d8f91440e7d31ae2c2c67906657ad641a29a35f4452f5edac76ec8a7d711161efc5
SSDEEP 6144:WcCbvS3PdUOKrdhXhZVJPGSFgjUE0uS//bTAOUBS3:WzbvS3irdhRZVJ+SpTe
TLSH
T13344AF2175E2C472D47211324978DBB59A7EB9380F2597EBA3D41F3ECE302C1A731A66
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_c0c6ba6f8a7e4dfaefe68b82e8cbe924_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

File Explorer

2026-07-23_c0c6ba6f8a7e4dfaefe68b82e8cbe924_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

.exe 254KB

2026-07-23_c0c6ba6f8a7e4dfaefe68b82e8cbe924_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

IMPHASH 4d4d5a128058294a4d31a0ffef1909e9
SHA256 4d9df4ae5489e38813e7fe2eacd1b0af2d1f1161d2390587a1aa59011b7fb9e5
MD5 c0c6ba6f8a7e4dfaefe68b82e8cbe924
SHA1 2593de200b6330ab159658abe31a8cd25e6ae244
SHA512 dd7accf0df0dbce7e0312cceb61b1c4659b21da4172f7c1081d14c1160713d8f91440e7d31ae2c2c67906657ad641a29a35f4452f5edac76ec8a7d711161efc5
SSDEEP 6144:WcCbvS3PdUOKrdhXhZVJPGSFgjUE0uS//bTAOUBS3:WzbvS3irdhRZVJ+SpTe
TLSH
T13344AF2175E2C472D47211324978DBB59A7EB9380F2597EBA3D41F3ECE302C1A731A66
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

63001

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualAlloc GetModuleFileNameW CreatePipe PeekNamedPipe InitializeCriticalSectionEx WaitForSingleObject OpenProcess CreateToolhelp32Snapshot Sleep GetLastError Process32NextW K32GetModuleBaseNameW CreateFileA Process32FirstW CloseHandle RaiseException CreateThread HeapAlloc K32EnumProcesses DecodePointer GetProcAddress WriteFile GetFileSize DeleteCriticalSection ExitProcess GetCurrentProcessId GetProcessHeap GetModuleHandleW CopyFileW CreateSymbolicLinkW CreateProcessA GetFileType MapViewOfFile GetExitCodeProcess WriteConsoleW CreateFileW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage GetStdHandle GetCurrentProcess HeapFree GetModuleFileNameA ReadFile CreateFileMappingA CreateDirectoryW FindNextFileW FindFirstFileExW FindClose HeapSize HeapReAlloc ReadConsoleW SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency GetStringTypeW WideCharToMultiByte GetCurrentThreadId GetSystemTimeAsFileTime EnterCriticalSection LeaveCriticalSection EncodePointer LocalFree LCMapStringEx GetCPInfo IsDebuggerPresent OutputDebugStringW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetStartupInfoW InitializeSListHead RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW CreateProcessW GetFileAttributesExW

user32

TranslateMessage MessageBoxA RegisterClassW DispatchMessageW GetMessageW DefWindowProcW CreateWindowExW

advapi32

AdjustTokenPrivileges AllocateAndInitializeSid OpenProcessToken FreeSid CheckTokenMembership LookupPrivilegeValueW

shell32

ShellExecuteW

ole32

CoCreateInstance CoInitializeEx CoInitializeSecurity

oleaut32

SysFreeString SysAllocString VariantClear VariantInit

wininet

InternetOpenA InternetOpenUrlA InternetReadFile InternetCloseHandle HttpQueryInfoA

shlwapi

PathFindFileNameA

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_c0c6ba6f8a7e4dfaefe68b82e8cbe924_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

kernel32

user32

advapi32

shell32

ole32

oleaut32

wininet

shlwapi

generic