General
- Target 2026-07-23_08181e1299d91ed5c484b0a99e1efaf5_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_swisyn
- Size 440KB
- Sample260723-bt2djsyfqe
- SHA256 59dd9508cf247fdfa70882c227ccd10358cce2e0ecb08ec3e10954ae4da067ce
- MD5 08181e1299d91ed5c484b0a99e1efaf5
- SHA1 ccbfaf2543a38214ee2d03e92d815167079ccef8
- SHA512 df36461c2431bfd19d217703046fc465acbcdf87af3301b7f43ec169dc5f52383e26222b2f229add3f8bfbcb6e31b8b3b5ba212828c16fba8f75f33713b5abcf
- SSDEEP 6144:XsLqdufVUNDanu7GOlab76OGVBYukqhiExLcJVWr4LQLGFdAOxGKyE61:cFUNDau7GOlQ6nBvkqeVJQOd4E61
- TLSH T153A48D12B9918836D4B209711970D666B93A7D311F749D8F73E42B6C9E30682F6F0B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_08181e1299d91ed5c484b0a99e1efaf5_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_swisyn.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_08181e1299d91ed5c484b0a99e1efaf5_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_swisyn.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_08181e1299d91ed5c484b0a99e1efaf5_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_swisyn
- Size 440KB
- SHA256 59dd9508cf247fdfa70882c227ccd10358cce2e0ecb08ec3e10954ae4da067ce
- MD5 08181e1299d91ed5c484b0a99e1efaf5
- SHA1 ccbfaf2543a38214ee2d03e92d815167079ccef8
- SHA512 df36461c2431bfd19d217703046fc465acbcdf87af3301b7f43ec169dc5f52383e26222b2f229add3f8bfbcb6e31b8b3b5ba212828c16fba8f75f33713b5abcf
- SSDEEP 6144:XsLqdufVUNDanu7GOlab76OGVBYukqhiExLcJVWr4LQLGFdAOxGKyE61:cFUNDau7GOlQ6nBvkqeVJQOd4E61
- TLSH T153A48D12B9918836D4B209711970D666B93A7D311F749D8F73E42B6C9E30682F6F0B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies visibility of hidden/system files in Explorer
Executes dropped EXE
Adds Run key to start application
Drops file in System32 directory