General
- Target 2026-07-29_9bdf189ddd9d3516135a1986a7a3c714_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc
- Size 628KB
- Sample260729-mtx7nstygt
- SHA256 eb9bbc3030fe8177b80c1385c5f63655c080130a3b05a6ae494887374b5e4baa
- MD5 9bdf189ddd9d3516135a1986a7a3c714
- SHA1 16ed67b565512d2ed174aaaa4f8d5b04f23872cd
- SHA512 c8d6e3d75f3cb182ace514497f304a2a384a0df159dee39cdddba8e09313e72918d48ddd1204b477f4a96847ab43db4a5af1c5c2902e5feb0a33b5a129438813
- SSDEEP 12288:u8o4+ZvqdCoD6wa/F9ufcpvqiv3YZtF15kjH8MJz:+4I+6//Lu+i23OMl
- TLSH T166D49E2275919077E07606358C74EB708BBEB8700F616ACB73D0C69A5E746C1AF27B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_9bdf189ddd9d3516135a1986a7a3c714_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
eagle11
C2
-
http://23.94.252.171
Attributes
-
url_path
/60cdc8e27a6d4451.php
rc4.traffic_key
rc4.C2
Targets
-
- Target 2026-07-29_9bdf189ddd9d3516135a1986a7a3c714_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc
- Size 628KB
- SHA256 eb9bbc3030fe8177b80c1385c5f63655c080130a3b05a6ae494887374b5e4baa
- MD5 9bdf189ddd9d3516135a1986a7a3c714
- SHA1 16ed67b565512d2ed174aaaa4f8d5b04f23872cd
- SHA512 c8d6e3d75f3cb182ace514497f304a2a384a0df159dee39cdddba8e09313e72918d48ddd1204b477f4a96847ab43db4a5af1c5c2902e5feb0a33b5a129438813
- SSDEEP 12288:u8o4+ZvqdCoD6wa/F9ufcpvqiv3YZtF15kjH8MJz:+4I+6//Lu+i23OMl
- TLSH T166D49E2275919077E07606358C74EB708BBEB8700F616ACB73D0C69A5E746C1AF27B27
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Stealc stealer Version 2