General
- Target 2026-07-29_b1322cdcf8860f117902b56cf9949637_amadey_cobalt-strike_elex_icedid_luca-stealer_lynx_njrat_stealc
- Size 561KB
- Sample260729-mp8slstxhs
- SHA256 af8a8cbbae0a6d042087f347d116b46554b163613393acf2049790c42974483b
- MD5 b1322cdcf8860f117902b56cf9949637
- SHA1 3e9d25ea1120032d889710effc5b0b8af4c53926
- SHA512 3edadd7efad525b1b3c386f25d1ab63c06f55a14de4e7809db63d879480417efcc86ba2ab2cb016074c5292a50336de97edaae8d017a40becfd3db46cd22134a
- SSDEEP 12288:IlNEYwnZOzxjS/7YYUf23vMeY6ReOSoEhLD:IlNEFZOzQzVUGvM1L
- TLSH T112C48C03B541D4B6E1B70974CD75AB219BFEB8700BA05A8B63D00DE95E706C1EF26B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_b1322cdcf8860f117902b56cf9949637_amadey_cobalt-strike_elex_icedid_luca-stealer_lynx_njrat_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_b1322cdcf8860f117902b56cf9949637_amadey_cobalt-strike_elex_icedid_luca-stealer_lynx_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
ddd
C2
-
http://193.143.1.189
Attributes
-
url_path
/3a15c8f9140e7a10.php
rc4.traffic_key
rc4.C2
Targets
-
- Target 2026-07-29_b1322cdcf8860f117902b56cf9949637_amadey_cobalt-strike_elex_icedid_luca-stealer_lynx_njrat_stealc
- Size 561KB
- SHA256 af8a8cbbae0a6d042087f347d116b46554b163613393acf2049790c42974483b
- MD5 b1322cdcf8860f117902b56cf9949637
- SHA1 3e9d25ea1120032d889710effc5b0b8af4c53926
- SHA512 3edadd7efad525b1b3c386f25d1ab63c06f55a14de4e7809db63d879480417efcc86ba2ab2cb016074c5292a50336de97edaae8d017a40becfd3db46cd22134a
- SSDEEP 12288:IlNEYwnZOzxjS/7YYUf23vMeY6ReOSoEhLD:IlNEFZOzQzVUGvM1L
- TLSH T112C48C03B541D4B6E1B70974CD75AB219BFEB8700BA05A8B63D00DE95E706C1EF26B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10