General
- Target 2026-07-23_85e801192f44483e16e2d90091d65c9a_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn
- Size 861KB
- Sample260723-blawmaef88
- SHA256 9d3f74ef2bcc2564c3f66cee330909ebaf3a0ac8938b2f3143d178e3e7c8b1e5
- MD5 85e801192f44483e16e2d90091d65c9a
- SHA1 5dac8a46222e756b1a453a9ba2aab586f2e2fee9
- SHA512 323a06a40d7b8a9662856f6b47a73cc1be241f5224d32c15518aac92d4ee6bf78ef40fac5b849bb4452c36bd58fefcfc0fa464308931bca9ebf35c7163e9d32a
- SSDEEP 24576:cFOaPFwel2D49G+KmwbryX9dem687TUR/K:sRwel2X+TwaKm64q/K
- TLSH T1BB159D12F7E050B6E1B756709972C625EA3ABC250F70CA8F23549A5E5F33A81EE34713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_85e801192f44483e16e2d90091d65c9a_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_85e801192f44483e16e2d90091d65c9a_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_85e801192f44483e16e2d90091d65c9a_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_stealc_swisyn
- Size 861KB
- SHA256 9d3f74ef2bcc2564c3f66cee330909ebaf3a0ac8938b2f3143d178e3e7c8b1e5
- MD5 85e801192f44483e16e2d90091d65c9a
- SHA1 5dac8a46222e756b1a453a9ba2aab586f2e2fee9
- SHA512 323a06a40d7b8a9662856f6b47a73cc1be241f5224d32c15518aac92d4ee6bf78ef40fac5b849bb4452c36bd58fefcfc0fa464308931bca9ebf35c7163e9d32a
- SSDEEP 24576:cFOaPFwel2D49G+KmwbryX9dem687TUR/K:sRwel2X+TwaKm64q/K
- TLSH T1BB159D12F7E050B6E1B756709972C625EA3ABC250F70CA8F23549A5E5F33A81EE34713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory