General
- Target 2026-07-31_2f19295ba7e3a9d9cb236d66c8450e04_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 472KB
- Sample260731-dvqdsavwey
- SHA256 98ba5c406d7529580b81ea6452b0dc9f314172e6b62f36787bdbdb122cb6e135
- MD5 2f19295ba7e3a9d9cb236d66c8450e04
- SHA1 7c2af17ddb48d33005baf5c8a962f7347b9701b5
- SHA512 c17a04e85e9a194c00f236664837bd31936e5753f388bc6f7bf228f2f8dd0b9b5a6e3b3b5516c3473f746eae84b5c1ea7b658700b923e38b85a5ae95839fe79e
- SSDEEP 6144:qPUIrO0NCh31Alxujw54YsnLiO1ptnvT0lAkuWOGUi/83FrPKoTIf5N4AOOnObj9:qPUIrO0NChSlMw4vn7T0lAnWOB/Pj9
- TLSH T173A44B217813C032D66191722E79FFF585ADB8259B7109DB7BC0CF7699201E26A31F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-31_2f19295ba7e3a9d9cb236d66c8450e04_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
amadey
Version
-
5.50
Botnet
-
9fa1e2
C2
-
http://176.46.157.50
Attributes
-
install_dir
bd4cae89c3
-
install_file
suker.exe
-
strings_key
a27669e4fa4aae7e94baf28c7141a7c8
-
url_paths
/tu3d2rom/index.php
rc4.plain
Targets
-
- Target 2026-07-31_2f19295ba7e3a9d9cb236d66c8450e04_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 472KB
- SHA256 98ba5c406d7529580b81ea6452b0dc9f314172e6b62f36787bdbdb122cb6e135
- MD5 2f19295ba7e3a9d9cb236d66c8450e04
- SHA1 7c2af17ddb48d33005baf5c8a962f7347b9701b5
- SHA512 c17a04e85e9a194c00f236664837bd31936e5753f388bc6f7bf228f2f8dd0b9b5a6e3b3b5516c3473f746eae84b5c1ea7b658700b923e38b85a5ae95839fe79e
- SSDEEP 6144:qPUIrO0NCh31Alxujw54YsnLiO1ptnvT0lAkuWOGUi/83FrPKoTIf5N4AOOnObj9:qPUIrO0NChSlMw4vn7T0lAnWOB/Pj9
- TLSH T173A44B217813C032D66191722E79FFF585ADB8259B7109DB7BC0CF7699201E26A31F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Amadey x86-bit Payload