General
- Target 2026-07-29_378c797057708210d66145da7472ad55_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 448KB
- Sample260729-nav4mseq8y
- SHA256 a42a7fd1a318df4ddc3b73a770aa7efed0e4beda49f2d8dfb0c41a79773872e0
- MD5 378c797057708210d66145da7472ad55
- SHA1 afd5aa9b20391009d54fc55ca4843d14a20a72b4
- SHA512 b84b8ad8f27cca5310b209c66c524fd9aaceb6e7d7fc5e0af1995905bd3c85260ba0fe5d5e29d3d4efa8f37ea7c7f4ef97d5e0d28e4f7e317ee559612fa7ff67
- SSDEEP 6144:THF0VKkWrb4QC1uwzV3ohQU1d+/mN9peVHzsAyuWZGUf/Sdfy9103T7fmj4AO5kf:THF0VKkWrb4QDwR4QWdyzsAlWZBmgqM
- TLSH T175A44B217813C032D66191721F79FFF685ADA8259B7109DB7BC40F769E202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_378c797057708210d66145da7472ad55_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_378c797057708210d66145da7472ad55_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
amadey
Version
-
5.55
Botnet
-
fbf543
C2
-
http://94.154.35.25
Attributes
-
install_dir
96a319e745
-
install_file
Srxelqcif.exe
-
strings_key
f8bfac017914b836f3106c5bcd0878fe
-
url_paths
/di9ku38f/index.php
rc4.plain
Targets
-
- Target 2026-07-29_378c797057708210d66145da7472ad55_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 448KB
- SHA256 a42a7fd1a318df4ddc3b73a770aa7efed0e4beda49f2d8dfb0c41a79773872e0
- MD5 378c797057708210d66145da7472ad55
- SHA1 afd5aa9b20391009d54fc55ca4843d14a20a72b4
- SHA512 b84b8ad8f27cca5310b209c66c524fd9aaceb6e7d7fc5e0af1995905bd3c85260ba0fe5d5e29d3d4efa8f37ea7c7f4ef97d5e0d28e4f7e317ee559612fa7ff67
- SSDEEP 6144:THF0VKkWrb4QC1uwzV3ohQU1d+/mN9peVHzsAyuWZGUf/Sdfy9103T7fmj4AO5kf:THF0VKkWrb4QDwR4QWdyzsAlWZBmgqM
- TLSH T175A44B217813C032D66191721F79FFF685ADA8259B7109DB7BC40F769E202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10