General
- Target 2026-08-02_0b1ec19c226bf7335371b18483fd5466_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_swisyn
- Size 546KB
- Sample260802-12k4zagm6y
- SHA256 17afc08a2eee54f81cda5d6334c2760aa802714a2fe1f7b89d8e0178eccc49ca
- MD5 0b1ec19c226bf7335371b18483fd5466
- SHA1 feb7f67a0a1e90dbb2ef3de91dfa02e7b30c1d13
- SHA512 ddaade3afd518b32d5f98086f9822cf6c47be2f9e84763c0cf694a154e73be9e8575ee21c4ddffafab74e9ff16260e0afb39bfeb3b483ab15de9b628f9e77fa4
- SSDEEP 12288:PFUNDa/9OK3JtTsXTKXB8m4UEK2WeQcjYVYhRV4:PFOa/MK/TsXlyEicjYVYhRV4
- TLSH T172C49E22B940A032D56205706EA8D77A7A7D7D311FA0AD8B73D45B1D2E70283F67272F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_0b1ec19c226bf7335371b18483fd5466_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_0b1ec19c226bf7335371b18483fd5466_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_0b1ec19c226bf7335371b18483fd5466_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_swisyn
- Size 546KB
- SHA256 17afc08a2eee54f81cda5d6334c2760aa802714a2fe1f7b89d8e0178eccc49ca
- MD5 0b1ec19c226bf7335371b18483fd5466
- SHA1 feb7f67a0a1e90dbb2ef3de91dfa02e7b30c1d13
- SHA512 ddaade3afd518b32d5f98086f9822cf6c47be2f9e84763c0cf694a154e73be9e8575ee21c4ddffafab74e9ff16260e0afb39bfeb3b483ab15de9b628f9e77fa4
- SSDEEP 12288:PFUNDa/9OK3JtTsXTKXB8m4UEK2WeQcjYVYhRV4:PFOa/MK/TsXlyEicjYVYhRV4
- TLSH T172C49E22B940A032D56205706EA8D77A7A7D7D311FA0AD8B73D45B1D2E70283F67272F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory