General
- Target 2026-07-23_01ba4248b211a86eab421833b563a292_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_swisyn
- Size 364KB
- Sample260723-bvbvaacl4z
- SHA256 77851b1638763ae7c6116c7568c4e01975e6ccba56e3a8a24920362e18248434
- MD5 01ba4248b211a86eab421833b563a292
- SHA1 055bfd5ed6cf192d79f2c7d3cf95f2af5bc7d2da
- SHA512 d0e41e5151bd0d0c19b80ae621ab71125d935ac2e51560adb960ef508ff2d9b90addf8b9ccad104edce96710d91abd35b2a0ab90fc34f79faed1d35a26fcf253
- SSDEEP 6144:XsLqdufVUNDanUfmDqZFCRyhJECx3LoL7AOtQ0hvWJ:cFUNDaNGZF5NxsnHhuJ
- TLSH T1C2846C127AD18836D9B249701CB4D7797A3A7E310F709D8F2394AB295D31682B6F073B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-23_01ba4248b211a86eab421833b563a292_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_01ba4248b211a86eab421833b563a292_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_01ba4248b211a86eab421833b563a292_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_swisyn
- Size 364KB
- SHA256 77851b1638763ae7c6116c7568c4e01975e6ccba56e3a8a24920362e18248434
- MD5 01ba4248b211a86eab421833b563a292
- SHA1 055bfd5ed6cf192d79f2c7d3cf95f2af5bc7d2da
- SHA512 d0e41e5151bd0d0c19b80ae621ab71125d935ac2e51560adb960ef508ff2d9b90addf8b9ccad104edce96710d91abd35b2a0ab90fc34f79faed1d35a26fcf253
- SSDEEP 6144:XsLqdufVUNDanUfmDqZFCRyhJECx3LoL7AOtQ0hvWJ:cFUNDaNGZF5NxsnHhuJ
- TLSH T1C2846C127AD18836D9B249701CB4D7797A3A7E310F709D8F2394AB295D31682B6F073B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory