General
- Target 2026-07-30_385d3eb599a100d62b4756b9ed8416f2_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 448KB
- Sample260730-l4acxsfe57
- SHA256 c1b89219c6efbad5fdfcf5e336895079e3c5d55387695f947ebbe6323f85e83b
- MD5 385d3eb599a100d62b4756b9ed8416f2
- SHA1 300e714292116e234430a06e3e1339d8d6f858ac
- SHA512 2fdcd8478a126902a31c58af5088b274ebce64adaa3de2148ecaaf6a1e25a87458b8b87d0f344fefd6d787c1de3a6cf9a9e85cef1a1faa04f16da9e52c4a380c
- SSDEEP 6144:THF0VKkWrb4QC1uwzV3ohQU1d+/mN9peVHzsAyuWZGUf/Sdfy9103T7fmj4AO5kE:THF0VKkWrb4QDwR4QWdyzsAlWZBmrqM
- TLSH T1D2A44B217813C032D66191721F79FFF685ADA8259B7109DB7BC40F769A202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_385d3eb599a100d62b4756b9ed8416f2_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_385d3eb599a100d62b4756b9ed8416f2_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
amadey
Version
-
5.55
Botnet
-
fbf543
C2
-
http://94.154.35.25
Attributes
-
install_dir
96a319e745
-
install_file
Srxelqcif.exe
-
strings_key
f8bfac017914b836f3106c5bcd0878fe
-
url_paths
/di9ku38f/index.php
rc4.plain
Targets
-
- Target 2026-07-30_385d3eb599a100d62b4756b9ed8416f2_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 448KB
- SHA256 c1b89219c6efbad5fdfcf5e336895079e3c5d55387695f947ebbe6323f85e83b
- MD5 385d3eb599a100d62b4756b9ed8416f2
- SHA1 300e714292116e234430a06e3e1339d8d6f858ac
- SHA512 2fdcd8478a126902a31c58af5088b274ebce64adaa3de2148ecaaf6a1e25a87458b8b87d0f344fefd6d787c1de3a6cf9a9e85cef1a1faa04f16da9e52c4a380c
- SSDEEP 6144:THF0VKkWrb4QC1uwzV3ohQU1d+/mN9peVHzsAyuWZGUf/Sdfy9103T7fmj4AO5kE:THF0VKkWrb4QDwR4QWdyzsAlWZBmrqM
- TLSH T1D2A44B217813C032D66191721F79FFF685ADA8259B7109DB7BC40F769A202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10