General
- Target 2026-07-30_d741be9599acf79821ca3a2a6a298b74_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc
- Size 628KB
- Sample260730-lrbp8ayxft
- SHA256 b252bb442ff3417760cd1e944eb32e97e0bc2ee9474b2ab52a1eb7036e0650ba
- MD5 d741be9599acf79821ca3a2a6a298b74
- SHA1 186ddf12487ed82144055d5ad8b8b9f26f40b60a
- SHA512 7f6f18b1ae62346d11a4d60e49e63218db6e85599b6f68e5aaaa5f4375740c1cc7d0c4531f4f0466af112d6df258c51b538dd52e97245c768e011b5b496b2b79
- SSDEEP 12288:c8o4+ZvqdCoD6wIJSDuxwpHqiv3YZtF15kjH4:44I+6BJIuEK23q
- TLSH T12BD49E12759194B6E47606318C74DB708BBDBC700F616ACB73C0CA9A6E706C1AF37B66
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_d741be9599acf79821ca3a2a6a298b74_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
OG
C2
-
http://23.94.252.171
Attributes
-
url_path
/60cdc8e27a6d4451.php
rc4.traffic_key
rc4.C2
Targets
-
- Target 2026-07-30_d741be9599acf79821ca3a2a6a298b74_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc
- Size 628KB
- SHA256 b252bb442ff3417760cd1e944eb32e97e0bc2ee9474b2ab52a1eb7036e0650ba
- MD5 d741be9599acf79821ca3a2a6a298b74
- SHA1 186ddf12487ed82144055d5ad8b8b9f26f40b60a
- SHA512 7f6f18b1ae62346d11a4d60e49e63218db6e85599b6f68e5aaaa5f4375740c1cc7d0c4531f4f0466af112d6df258c51b538dd52e97245c768e011b5b496b2b79
- SSDEEP 12288:c8o4+ZvqdCoD6wIJSDuxwpHqiv3YZtF15kjH4:44I+6BJIuEK23q
- TLSH T12BD49E12759194B6E47606318C74DB708BBDBC700F616ACB73C0CA9A6E706C1AF37B66
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Stealc stealer Version 2