General
- Target 2026-07-23_89ea1247ce71109890f7f5855789055b_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_swisyn
- Size 396KB
- Sample260723-bk7tzaef86
- SHA256 83cd7cfcc8e2b8beb268af6ddba87db5916fe42f1d881e9565f816259af3b78d
- MD5 89ea1247ce71109890f7f5855789055b
- SHA1 3199bf16aa61029eb2dcfe241364cbf694be8098
- SHA512 d6c2385c7a55ad87f217623ff937db28eca3106aea1ad2fc1752c76b217edaff718e2c23864ab329e9a7e293b60f1b86240d13da4303e79dace7681972fc49ee
- SSDEEP 6144:XsLqdufVUNDanf4p7sG30xTX8tajKJGa5pIAOCvM6+M:cFUNDausGExT3KYQ7R
- TLSH T1ED846C1276E08836D4B219712CB4D7697A3A7D310F71DD9F23919A2C5E31682FAF072B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-23_89ea1247ce71109890f7f5855789055b_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_89ea1247ce71109890f7f5855789055b_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_89ea1247ce71109890f7f5855789055b_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_swisyn
- Size 396KB
- SHA256 83cd7cfcc8e2b8beb268af6ddba87db5916fe42f1d881e9565f816259af3b78d
- MD5 89ea1247ce71109890f7f5855789055b
- SHA1 3199bf16aa61029eb2dcfe241364cbf694be8098
- SHA512 d6c2385c7a55ad87f217623ff937db28eca3106aea1ad2fc1752c76b217edaff718e2c23864ab329e9a7e293b60f1b86240d13da4303e79dace7681972fc49ee
- SSDEEP 6144:XsLqdufVUNDanf4p7sG30xTX8tajKJGa5pIAOCvM6+M:cFUNDausGExT3KYQ7R
- TLSH T1ED846C1276E08836D4B219712CB4D7697A3A7D310F71DD9F23919A2C5E31682FAF072B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory