General
- Target 2026-07-29_9637799e1cb7ddb910b20235fe50928c_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 448KB
- Sample260729-mvy6csem5w
- SHA256 a825cadf4ebfd1a6ba02ccc29a63a670e9aab1b17346083ded88ee7b7a77f748
- MD5 9637799e1cb7ddb910b20235fe50928c
- SHA1 a41961db812ae32b1b324aa0a7d763b94e3059f1
- SHA512 cb1ca2e09cd046dc5b2f4afe940d1d169c4b58538a6b6acfc2b5232e6181887acc5bbec309b55b10a7c0f1181a183eb5b394862c5efdddaf6fa57ff0ee4e0bf3
- SSDEEP 6144:THF0VKkWrb4QC1uwzV3ohQU1d+/mN9peVHzsAyuWZGUf/Sdfy9103T7fm14AO5kP:THF0VKkWrb4QDwR4QWdyzsAlWZBIgqM
- TLSH T14DA44B217813C032D66191721F79FFF685ADA8259F7109DB7BC40F769A202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_9637799e1cb7ddb910b20235fe50928c_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_9637799e1cb7ddb910b20235fe50928c_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
amadey
Version
-
5.55
Botnet
-
fbf543
C2
-
http://94.154.35.25
Attributes
-
install_dir
96a319e745
-
install_file
Srxelqcif.exe
-
strings_key
f8bfac017914b836f3106c5bcd0878fe
-
url_paths
/di9ku38f/index.php
rc4.plain
Targets
-
- Target 2026-07-29_9637799e1cb7ddb910b20235fe50928c_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 448KB
- SHA256 a825cadf4ebfd1a6ba02ccc29a63a670e9aab1b17346083ded88ee7b7a77f748
- MD5 9637799e1cb7ddb910b20235fe50928c
- SHA1 a41961db812ae32b1b324aa0a7d763b94e3059f1
- SHA512 cb1ca2e09cd046dc5b2f4afe940d1d169c4b58538a6b6acfc2b5232e6181887acc5bbec309b55b10a7c0f1181a183eb5b394862c5efdddaf6fa57ff0ee4e0bf3
- SSDEEP 6144:THF0VKkWrb4QC1uwzV3ohQU1d+/mN9peVHzsAyuWZGUf/Sdfy9103T7fm14AO5kP:THF0VKkWrb4QDwR4QWdyzsAlWZBIgqM
- TLSH T14DA44B217813C032D66191721F79FFF685ADA8259F7109DB7BC40F769A202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10