General
- Target 2026-07-31_5a25f2bf47978ec5867f3172569fb2b8_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 472KB
- Sample260731-dlc24aak2s
- SHA256 bea364a2ca130b27c30dce884cc41d397cde5bfc036ea8e1823266ab3a31129d
- MD5 5a25f2bf47978ec5867f3172569fb2b8
- SHA1 8319308c8534931d598026a93346040e878ecb9d
- SHA512 a4b991fb892040f5363dda0f0366e5b20fa0139cba5671c823c17264c82e6c80d1dfc642b30049a407954bb02ce19735174feb37f7ca0d24b082717dedc90f31
- SSDEEP 6144:qPUIrO0NCh31AlxAjR5tYsnLi11ptnv60lAkuW8GUiO83trHKoTIf5M4AOOnqoj9:qPUIrO0NChSlubtvnu60lAnW8B5wj9
- TLSH T15DA44B217813C032D66291721E79EFF585ADB8259B7109DB7BC0CF7699201E26B31F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-31_5a25f2bf47978ec5867f3172569fb2b8_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
amadey
Version
-
5.50
Botnet
-
9fa1e2
C2
-
http://176.46.157.50
Attributes
-
install_dir
bd4cae89c3
-
install_file
suker.exe
-
strings_key
a27669e4fa4aae7e94baf28c7141a7c8
-
url_paths
/tu3d2rom/index.php
rc4.plain
Targets
-
- Target 2026-07-31_5a25f2bf47978ec5867f3172569fb2b8_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 472KB
- SHA256 bea364a2ca130b27c30dce884cc41d397cde5bfc036ea8e1823266ab3a31129d
- MD5 5a25f2bf47978ec5867f3172569fb2b8
- SHA1 8319308c8534931d598026a93346040e878ecb9d
- SHA512 a4b991fb892040f5363dda0f0366e5b20fa0139cba5671c823c17264c82e6c80d1dfc642b30049a407954bb02ce19735174feb37f7ca0d24b082717dedc90f31
- SSDEEP 6144:qPUIrO0NCh31AlxAjR5tYsnLi11ptnv60lAkuW8GUiO83trHKoTIf5M4AOOnqoj9:qPUIrO0NChSlubtvnu60lAnW8B5wj9
- TLSH T15DA44B217813C032D66291721E79EFF585ADB8259B7109DB7BC0CF7699201E26B31F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Amadey x86-bit Payload