2026-07-27_a31f5bcca831c3cf225906097b38e099_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-27_a31f5bcca831c3cf225906097b38e099_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader
Size 213KB
Sample260727-rppf7abe39
SHA256 ece946ed4b7fa835e91103381d049fb3867abf2835a2edfd30436a55fb52c9e9
MD5 a31f5bcca831c3cf225906097b38e099
SHA1 1dc95a8072a4c1d33986fcf71dbeb4f520967d75
SHA512 c60a8252cebccee065f3da68fe801ffa2b17739b15fa17c3e93c701061ea5ab73d1ad05ca95b06256ebe9065001d061b3ad7cab912a7f43574ee841868bc9866
SSDEEP 6144:cejK25PleWkSyeSgCgjW0RtPT6DAAOHXlDILfy:ce7USy18tPTyAZBkfy
TLSH
T1E3247C10B5D18573D5B2193109F8DB765A7EB9200F209AEF63D81B7E8F306C19A31B6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-27_a31f5bcca831c3cf225906097b38e099_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader

File Explorer

2026-07-27_a31f5bcca831c3cf225906097b38e099_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader

.exe 213KB

2026-07-27_a31f5bcca831c3cf225906097b38e099_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader

IMPHASH 7e5a7e7320bb07b46b3c19f2810f06be
SHA256 ece946ed4b7fa835e91103381d049fb3867abf2835a2edfd30436a55fb52c9e9
MD5 a31f5bcca831c3cf225906097b38e099
SHA1 1dc95a8072a4c1d33986fcf71dbeb4f520967d75
SHA512 c60a8252cebccee065f3da68fe801ffa2b17739b15fa17c3e93c701061ea5ab73d1ad05ca95b06256ebe9065001d061b3ad7cab912a7f43574ee841868bc9866
SSDEEP 6144:cejK25PleWkSyeSgCgjW0RtPT6DAAOHXlDILfy:ce7USy18tPTyAZBkfy
TLSH
T1E3247C10B5D18573D5B2193109F8DB765A7EB9200F209AEF63D81B7E8F306C19A31B6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17698

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapSize CreateFileW CopyFileW GetProcAddress GetWindowsDirectoryW LoadLibraryW GetNativeSystemInfo CloseHandle DeleteFileW GetSystemDirectoryW GetEnvironmentVariableW GetModuleFileNameW LocalFree HeapReAlloc ReadConsoleW SetFilePointerEx GetFileSizeEx ReadFile GetConsoleMode GetConsoleOutputCP QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetStringTypeW GetCPInfo RtlUnwind RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap FlushFileBuffers WriteConsoleW

user32

wsprintfW

advapi32

GetUserNameW RegCloseKey RegSetValueExW RegOpenKeyExW RegCreateKeyW RegQueryValueExW GetAce BuildExplicitAccessWithNameW SetEntriesInAclW SetNamedSecurityInfoW GetNamedSecurityInfoW LookupAccountSidW ConvertSidToStringSidW

netapi32

NetUserDel NetUserGetInfo NetApiBufferFree

shlwapi

PathRemoveFileSpecW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-27_a31f5bcca831c3cf225906097b38e099_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader

kernel32

user32

advapi32

netapi32

shlwapi

generic