General
- Target 2026-07-29_9ce79bf83c1e5939e0c17ceb638ffd8d_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 448KB
- Sample260729-mtr1natyft
- SHA256 a593ac052d4f0bf0a5faf84e353781b1b5064535a7e24c20298fe6fb900c00b2
- MD5 9ce79bf83c1e5939e0c17ceb638ffd8d
- SHA1 ab2f9ed6bce97b18198875de3fe45d957b1cb817
- SHA512 2e036bcf1707a01a07680a9092ed3577eea593784974d6fdb49cb2e7c038bc32bd770592cdd3a0cf497c774df3aee174cff35a70878eab1fb61e92f93088481f
- SSDEEP 6144:UAPUIrO0NCh31Alxujw54YsnLiO1ptnvT0lAkuW8GUi/83FrPKoTIf5N4AOOnpIR:DPUIrO0NChSlMw4vn7T0lAnW8B/7j
- TLSH T19FA44B217813D032D66291721E79FFF585ADB8259B7109DB7BC00F769E202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_9ce79bf83c1e5939e0c17ceb638ffd8d_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_9ce79bf83c1e5939e0c17ceb638ffd8d_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
amadey
Version
-
5.50
Botnet
-
9fa1e2
C2
-
http://176.46.157.50
Attributes
-
install_dir
bd4cae89c3
-
install_file
suker.exe
-
strings_key
a27669e4fa4aae7e94baf28c7141a7c8
-
url_paths
/tu3d2rom/index.php
rc4.plain
Targets
-
- Target 2026-07-29_9ce79bf83c1e5939e0c17ceb638ffd8d_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 448KB
- SHA256 a593ac052d4f0bf0a5faf84e353781b1b5064535a7e24c20298fe6fb900c00b2
- MD5 9ce79bf83c1e5939e0c17ceb638ffd8d
- SHA1 ab2f9ed6bce97b18198875de3fe45d957b1cb817
- SHA512 2e036bcf1707a01a07680a9092ed3577eea593784974d6fdb49cb2e7c038bc32bd770592cdd3a0cf497c774df3aee174cff35a70878eab1fb61e92f93088481f
- SSDEEP 6144:UAPUIrO0NCh31Alxujw54YsnLiO1ptnvT0lAkuW8GUi/83FrPKoTIf5N4AOOnpIR:DPUIrO0NChSlMw4vn7T0lAnW8B/7j
- TLSH T19FA44B217813D032D66291721E79FFF585ADB8259B7109DB7BC00F769E202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10