General
- Target 2026-07-29_c989d803d6978ae3686f41b9b3805b02_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 444KB
- Sample260729-mlxaeatxax
- SHA256 5a32593b183dfbf23814fa7038f60f0a77c86fa50086095054bf999074b7f7a1
- MD5 c989d803d6978ae3686f41b9b3805b02
- SHA1 cfa45e3551f94b14b941cbac188df2bf87df477f
- SHA512 13da9c3b9e90376d0ccfda868fc18f7dcc3b827b4b3b0716732e0a1b85db65fe156f8841630eec7564423eaedb7162bb9ef2120e8b5ce7cb11a62bea2299e833
- SSDEEP 12288:pjRbdPni4k0rpJMOzMPDR3y7nmAmTldGBwlc7plWovia4:04uLGma7Kda
- TLSH T175A44B217817D032D66191711F79FFF685ACAC269B7149DB7BC00E369E202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_c989d803d6978ae3686f41b9b3805b02_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_c989d803d6978ae3686f41b9b3805b02_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
amadey
Version
-
5.60
Botnet
-
d14a41
C2
-
http://178.16.54.200
Attributes
-
install_dir
8126767c2f
-
install_file
Uvwbf.exe
-
strings_key
ff703ac1673daad885c9f9755a3cf8df
-
url_paths
/f8nus4b/index.php
rc4.plain
Targets
-
- Target 2026-07-29_c989d803d6978ae3686f41b9b3805b02_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 444KB
- SHA256 5a32593b183dfbf23814fa7038f60f0a77c86fa50086095054bf999074b7f7a1
- MD5 c989d803d6978ae3686f41b9b3805b02
- SHA1 cfa45e3551f94b14b941cbac188df2bf87df477f
- SHA512 13da9c3b9e90376d0ccfda868fc18f7dcc3b827b4b3b0716732e0a1b85db65fe156f8841630eec7564423eaedb7162bb9ef2120e8b5ce7cb11a62bea2299e833
- SSDEEP 12288:pjRbdPni4k0rpJMOzMPDR3y7nmAmTldGBwlc7plWovia4:04uLGma7Kda
- TLSH T175A44B217817D032D66191711F79FFF685ACAC269B7149DB7BC00E369E202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10