General
- Target 2026-07-23_0d167878c86c63527a7b06d9e8892e0c_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_swisyn
- Size 810KB
- Sample260723-btwhascl31
- SHA256 14e29f26af1259f7c7479c93264e3b4666d79836474ebbb9b9e919224bc7af3a
- MD5 0d167878c86c63527a7b06d9e8892e0c
- SHA1 057bbd69989d998634c3af5b70dfb0bc12a1357c
- SHA512 c29f66a836eb9e8bf67bc654fcb3025f3f7e644182d22828cc91ffdc67dd47bdaec93b429b45a5867de08182ba91d3b6a84bd4e0188ffc19e995bf075261b743
- SSDEEP 12288:cFUNDaA1GkqvKoSr6P8/nnIavz7zCph0lhSMXleTtfDKk:cFOakrqyo4DnIaL7zoh0lhSMXlUOk
- TLSH T1C3059D2276E0C432E0B21A701D74D7666E3E7D304BB49D8F23D85A696E717C2E9B0727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_0d167878c86c63527a7b06d9e8892e0c_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_0d167878c86c63527a7b06d9e8892e0c_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_0d167878c86c63527a7b06d9e8892e0c_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_swisyn
- Size 810KB
- SHA256 14e29f26af1259f7c7479c93264e3b4666d79836474ebbb9b9e919224bc7af3a
- MD5 0d167878c86c63527a7b06d9e8892e0c
- SHA1 057bbd69989d998634c3af5b70dfb0bc12a1357c
- SHA512 c29f66a836eb9e8bf67bc654fcb3025f3f7e644182d22828cc91ffdc67dd47bdaec93b429b45a5867de08182ba91d3b6a84bd4e0188ffc19e995bf075261b743
- SSDEEP 12288:cFUNDaA1GkqvKoSr6P8/nnIavz7zCph0lhSMXleTtfDKk:cFOakrqyo4DnIaL7zoh0lhSMXlUOk
- TLSH T1C3059D2276E0C432E0B21A701D74D7666E3E7D304BB49D8F23D85A696E717C2E9B0727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory