General
- Target 2026-07-29_58b47a5a8b89bec8a2cc506f0661fb8f_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 448KB
- Sample260729-m5cp4st1ex
- SHA256 5ab06f30508cb7675eff8cee5e1f6a9803e103192f70a4540b039c2c0359c76d
- MD5 58b47a5a8b89bec8a2cc506f0661fb8f
- SHA1 b59e798e756dd9c0bbf82d9f5eae01cf210f22da
- SHA512 0d528d1a80e7bd0636309058f9264f49324ab6fb0671f871aa70e2f91c45d2a2d6e2406bf3f3b32aa3b7ae9cf3ea71038cc9cf6ce714e52a349f6ac70c4929c1
- SSDEEP 6144:UAPUIrO0NCh31Alxujw54YsnLiO1ptnvT0lAkuW8GUi/83FrPKoTIf5N4AOOnI5R:DPUIrO0NChSlMw4vn7T0lAnW8B/7j
- TLSH T1EBA44B217813D032D66291721E79FFF585ADB8259B7109DB7BC00F769E202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_58b47a5a8b89bec8a2cc506f0661fb8f_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_58b47a5a8b89bec8a2cc506f0661fb8f_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
amadey
Version
-
5.50
Botnet
-
9fa1e2
C2
-
http://176.46.157.50
Attributes
-
install_dir
bd4cae89c3
-
install_file
suker.exe
-
strings_key
a27669e4fa4aae7e94baf28c7141a7c8
-
url_paths
/tu3d2rom/index.php
rc4.plain
Targets
-
- Target 2026-07-29_58b47a5a8b89bec8a2cc506f0661fb8f_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 448KB
- SHA256 5ab06f30508cb7675eff8cee5e1f6a9803e103192f70a4540b039c2c0359c76d
- MD5 58b47a5a8b89bec8a2cc506f0661fb8f
- SHA1 b59e798e756dd9c0bbf82d9f5eae01cf210f22da
- SHA512 0d528d1a80e7bd0636309058f9264f49324ab6fb0671f871aa70e2f91c45d2a2d6e2406bf3f3b32aa3b7ae9cf3ea71038cc9cf6ce714e52a349f6ac70c4929c1
- SSDEEP 6144:UAPUIrO0NCh31Alxujw54YsnLiO1ptnvT0lAkuW8GUi/83FrPKoTIf5N4AOOnI5R:DPUIrO0NChSlMw4vn7T0lAnW8B/7j
- TLSH T1EBA44B217813D032D66291721E79FFF585ADB8259B7109DB7BC00F769E202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10