General
- Target 2026-07-31_9da78b721952fa6e9f6c7d60c681efc6_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 472KB
- Sample260731-c8xvcascjh
- SHA256 7827aed922633d98250f297dcda7a6b419862b24ef20d712a6abf1387b8bc42f
- MD5 9da78b721952fa6e9f6c7d60c681efc6
- SHA1 d539815e8e3518693a4c559daaf27cb1b83e64d5
- SHA512 5be3f45e65abafdaefe655ae4004fd08f3e0dbe3a1cf1b56cbd24cf8a6346282e73dc12fa558943df4a1b34aa41228fc6f3662d59c3b406257c9af53c3e58485
- SSDEEP 6144:qPUIrO0NCh31Alxujw54YsnLiO1ptnvT0lAkuW8GUir83FrPKoTIf5N4AOOnFZjI:qPUIrO0NChSlMw4vn7T0lAnW8B3ujI
- TLSH T1CDA44B217813C032D66191721E79FFF585ADB8259B7109DB7BC0CF769A202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-31_9da78b721952fa6e9f6c7d60c681efc6_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
amadey
Version
-
5.50
Botnet
-
9fa1e2
C2
-
http://176.46.157.50
Attributes
-
install_dir
bd4cae89c3
-
install_file
suker.exe
-
strings_key
a27669e4fa4aae7e94baf28c7141a7c8
-
url_paths
/tu3d2rom/index.php
rc4.plain
Targets
-
- Target 2026-07-31_9da78b721952fa6e9f6c7d60c681efc6_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 472KB
- SHA256 7827aed922633d98250f297dcda7a6b419862b24ef20d712a6abf1387b8bc42f
- MD5 9da78b721952fa6e9f6c7d60c681efc6
- SHA1 d539815e8e3518693a4c559daaf27cb1b83e64d5
- SHA512 5be3f45e65abafdaefe655ae4004fd08f3e0dbe3a1cf1b56cbd24cf8a6346282e73dc12fa558943df4a1b34aa41228fc6f3662d59c3b406257c9af53c3e58485
- SSDEEP 6144:qPUIrO0NCh31Alxujw54YsnLiO1ptnvT0lAkuW8GUir83FrPKoTIf5N4AOOnFZjI:qPUIrO0NChSlMw4vn7T0lAnW8B3ujI
- TLSH T1CDA44B217813C032D66191721E79FFF585ADB8259B7109DB7BC0CF769A202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Amadey x86-bit Payload