General
- Target 2026-07-31_9631cbdafbbb1710c82cd36c44ad48b4_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 448KB
- Sample260731-c93f8avsgw
- SHA256 a2bceae3737c0541ee7dda8203d444b7d96c724ba71a8e5fe36b48c7b38e82ab
- MD5 9631cbdafbbb1710c82cd36c44ad48b4
- SHA1 7db327e9d275be7fba5f89de2bb35d371b2e73b6
- SHA512 f1421648c54b2ab564587fd402b0ec4024e80d64391be93c75a7769f4350c8bcfdb0d6fe10dd5bd2a7ad5428a180219d3ef728b1af352ba34439fd56b9ddb491
- SSDEEP 6144:THF0VKkWrb4QC1uwzV3ohQU1d+/mN9peVHzsAyuWZGUf/Sdfy9103T7fm14AO5kf:THF0VKkWrb4QDwR4QWdyzsAlWZBIwqM
- TLSH T1D9A44B217813C032D66191721F79FFF685ADA8259F7109DB7BC40F769A202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-31_9631cbdafbbb1710c82cd36c44ad48b4_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_9631cbdafbbb1710c82cd36c44ad48b4_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
amadey
Version
-
5.55
Botnet
-
fbf543
C2
-
http://94.154.35.25
Attributes
-
install_dir
96a319e745
-
install_file
Srxelqcif.exe
-
strings_key
f8bfac017914b836f3106c5bcd0878fe
-
url_paths
/di9ku38f/index.php
rc4.plain
Targets
-
- Target 2026-07-31_9631cbdafbbb1710c82cd36c44ad48b4_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 448KB
- SHA256 a2bceae3737c0541ee7dda8203d444b7d96c724ba71a8e5fe36b48c7b38e82ab
- MD5 9631cbdafbbb1710c82cd36c44ad48b4
- SHA1 7db327e9d275be7fba5f89de2bb35d371b2e73b6
- SHA512 f1421648c54b2ab564587fd402b0ec4024e80d64391be93c75a7769f4350c8bcfdb0d6fe10dd5bd2a7ad5428a180219d3ef728b1af352ba34439fd56b9ddb491
- SSDEEP 6144:THF0VKkWrb4QC1uwzV3ohQU1d+/mN9peVHzsAyuWZGUf/Sdfy9103T7fm14AO5kf:THF0VKkWrb4QDwR4QWdyzsAlWZBIwqM
- TLSH T1D9A44B217813C032D66191721F79FFF685ADA8259F7109DB7BC40F769A202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10