General
- Target 2026-07-30_1c4c2ae7bb161ef360d6f64b88ebd48b_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 472KB
- Sample260730-l6k77sff42
- SHA256 a6980726e4a6a853c28e2bc47c90f591a6370e98f182920a9ab48c0576a6c672
- MD5 1c4c2ae7bb161ef360d6f64b88ebd48b
- SHA1 3402578fdef17ec816c02c34f0c9a2894d766c25
- SHA512 e986eb093dc6a2879f1c03348f2183fbc65270ead615365297fe6a1d2f1df4624ee9a8803fae3a16c16139c5ccd611a76a31d58a4728fc14a00817c09841ce93
- SSDEEP 6144:qPUIrO0NCh31Alxujw54YsnLiO1ptnvS0lAkuW8GUi/83FrPKoTIf5N4AOOnzQjq:qPUIrO0NChSlMw4vn7S0lAnW8B/Fjq
- TLSH T186A44B217812C032D66191721E79FFF585ADB8259B7109DB7BC0CF769E202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_1c4c2ae7bb161ef360d6f64b88ebd48b_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
amadey
Version
-
5.50
Botnet
-
9fa1e2
C2
-
http://176.46.157.50
Attributes
-
install_dir
bd4cae89c3
-
install_file
suker.exe
-
strings_key
a27669e4fa4aae7e94baf28c7141a7c8
-
url_paths
/tu3d2rom/index.php
rc4.plain
Targets
-
- Target 2026-07-30_1c4c2ae7bb161ef360d6f64b88ebd48b_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 472KB
- SHA256 a6980726e4a6a853c28e2bc47c90f591a6370e98f182920a9ab48c0576a6c672
- MD5 1c4c2ae7bb161ef360d6f64b88ebd48b
- SHA1 3402578fdef17ec816c02c34f0c9a2894d766c25
- SHA512 e986eb093dc6a2879f1c03348f2183fbc65270ead615365297fe6a1d2f1df4624ee9a8803fae3a16c16139c5ccd611a76a31d58a4728fc14a00817c09841ce93
- SSDEEP 6144:qPUIrO0NCh31Alxujw54YsnLiO1ptnvS0lAkuW8GUi/83FrPKoTIf5N4AOOnzQjq:qPUIrO0NChSlMw4vn7S0lAnW8B/Fjq
- TLSH T186A44B217812C032D66191721E79FFF585ADB8259B7109DB7BC0CF769E202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Amadey x86-bit Payload