General
- Target 2026-07-29_9fc51ae9ba6390bdadc55a216401a564_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 444KB
- Sample260729-mtbcxasama
- SHA256 79bcd1891bf1a7437839c8f0fac3bb4e709aff57ba5f11b8d5e13528308088e6
- MD5 9fc51ae9ba6390bdadc55a216401a564
- SHA1 3f4787a21a3f1ed4ae2a7c39628807ba25fcd00a
- SHA512 2809497e3aa4abaaaeebb6261448980ce503c276b2bb66dcfd66231068af0bbe71418d9ccfd967e21cef07ca7dd2bedf21d5a0a43f6741ef5e78d26db369ec4e
- SSDEEP 12288:pjRbdPni4k0rpJMOzMPDR3y7nmAmTldGBwlc7plVovia4:04uLGma7Rda
- TLSH T1EBA45B217813D032D66191711F79FFF685ACAC259B7149DB7BC40E369E202E26A31F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_9fc51ae9ba6390bdadc55a216401a564_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_9fc51ae9ba6390bdadc55a216401a564_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
amadey
Version
-
5.60
Botnet
-
d14a41
C2
-
http://178.16.54.200
Attributes
-
install_dir
8126767c2f
-
install_file
Uvwbf.exe
-
strings_key
ff703ac1673daad885c9f9755a3cf8df
-
url_paths
/f8nus4b/index.php
rc4.plain
Targets
-
- Target 2026-07-29_9fc51ae9ba6390bdadc55a216401a564_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 444KB
- SHA256 79bcd1891bf1a7437839c8f0fac3bb4e709aff57ba5f11b8d5e13528308088e6
- MD5 9fc51ae9ba6390bdadc55a216401a564
- SHA1 3f4787a21a3f1ed4ae2a7c39628807ba25fcd00a
- SHA512 2809497e3aa4abaaaeebb6261448980ce503c276b2bb66dcfd66231068af0bbe71418d9ccfd967e21cef07ca7dd2bedf21d5a0a43f6741ef5e78d26db369ec4e
- SSDEEP 12288:pjRbdPni4k0rpJMOzMPDR3y7nmAmTldGBwlc7plVovia4:04uLGma7Rda
- TLSH T1EBA45B217813D032D66191711F79FFF685ACAC259B7149DB7BC40E369E202E26A31F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10