General
- Target 2026-07-30_fcce280bd009e5a0ac642dd9e6096454_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 448KB
- Sample260730-lnb7ksywhy
- SHA256 ab6b3a1d4bd3a914efda63cbd400c596bb5efb232caded85b5fdbe575fde8268
- MD5 fcce280bd009e5a0ac642dd9e6096454
- SHA1 46f867865decf95b5a13ab0c229e48a8d8c94c8f
- SHA512 3ef794a43947d448a029e2a395783aacaa8b7da25aa0abe2a7b313870b9e4b5cd2bc86685adb2bc02314bbe8098e483a7000cd9914202ff348324a5ad1c7a556
- SSDEEP 6144:THF0VKkWrb4QC1uwzV3ohQU1d+/mN9peVHzsAyuWZGUf/Sdfy9103T7fm14AO5kj:THF0VKkWrb4QDwR4QWdyzsAlWZBIMqM
- TLSH T17AA44B217813C032D66191721F79FFF685ADA8259B7109DB7BC40F769E202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_fcce280bd009e5a0ac642dd9e6096454_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_fcce280bd009e5a0ac642dd9e6096454_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
amadey
Version
-
5.55
Botnet
-
fbf543
C2
-
http://94.154.35.25
Attributes
-
install_dir
96a319e745
-
install_file
Srxelqcif.exe
-
strings_key
f8bfac017914b836f3106c5bcd0878fe
-
url_paths
/di9ku38f/index.php
rc4.plain
Targets
-
- Target 2026-07-30_fcce280bd009e5a0ac642dd9e6096454_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 448KB
- SHA256 ab6b3a1d4bd3a914efda63cbd400c596bb5efb232caded85b5fdbe575fde8268
- MD5 fcce280bd009e5a0ac642dd9e6096454
- SHA1 46f867865decf95b5a13ab0c229e48a8d8c94c8f
- SHA512 3ef794a43947d448a029e2a395783aacaa8b7da25aa0abe2a7b313870b9e4b5cd2bc86685adb2bc02314bbe8098e483a7000cd9914202ff348324a5ad1c7a556
- SSDEEP 6144:THF0VKkWrb4QC1uwzV3ohQU1d+/mN9peVHzsAyuWZGUf/Sdfy9103T7fm14AO5kj:THF0VKkWrb4QDwR4QWdyzsAlWZBIMqM
- TLSH T17AA44B217813C032D66191721F79FFF685ADA8259B7109DB7BC40F769E202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10