General
- Target 2026-07-28_885d32e4b358de3e1ff8e706fda23b71_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc
- Size 628KB
- Sample260728-gctj9sfc63
- SHA256 8c0a7cba060b2b796b3d439c20e8b78140cfbac5b6cd996e03e4492a4917a952
- MD5 885d32e4b358de3e1ff8e706fda23b71
- SHA1 825204c4cfd44527282ceb4b98ab77bc933550c9
- SHA512 88e89b806b02f4c374f57aa99d3023f2a3bc098dd30344b84de36abfafefd6e7030637379d423d7c504da902c0719a6aa53251705ff0c971e1ac20b2a77d46f5
- SSDEEP 12288:c80CMfqdCoD6wa4tKWAxnav3YZtF15kjH8MJ/:Ex+6/4U5nO3OMV
- TLSH T1F8D48D2275919477E47606348C74EB718BBDBC700F616ACB73C0CA992E606C1AF27B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_885d32e4b358de3e1ff8e706fda23b71_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
sdjfuikkd
C2
-
http://45.93.20.34
Attributes
-
url_path
/20e1a9f6de594e28.php
rc4.traffic_key
rc4.C2
Targets
-
- Target 2026-07-28_885d32e4b358de3e1ff8e706fda23b71_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc
- Size 628KB
- SHA256 8c0a7cba060b2b796b3d439c20e8b78140cfbac5b6cd996e03e4492a4917a952
- MD5 885d32e4b358de3e1ff8e706fda23b71
- SHA1 825204c4cfd44527282ceb4b98ab77bc933550c9
- SHA512 88e89b806b02f4c374f57aa99d3023f2a3bc098dd30344b84de36abfafefd6e7030637379d423d7c504da902c0719a6aa53251705ff0c971e1ac20b2a77d46f5
- SSDEEP 12288:c80CMfqdCoD6wa4tKWAxnav3YZtF15kjH8MJ/:Ex+6/4U5nO3OMV
- TLSH T1F8D48D2275919477E47606348C74EB718BBDBC700F616ACB73C0CA992E606C1AF27B67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Stealc stealer Version 2