General
- Target 2026-08-01_3f8210fb70b65dc5e14b37c15cf8da4a_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_vidar
- Size 5.5MB
- Sample260802-a925caar2w
- SHA256 9441741902519a0f026127c69b7727fd4b05fdfbdae815c8aa1ed05c005da8a5
- MD5 3f8210fb70b65dc5e14b37c15cf8da4a
- SHA1 787dc4ddec344ade04265470f10bb09d64f9d04e
- SHA512 1fbfc3fbb940dc7aac621929176c167b33ec6dce544c06fad02229b0f35a3138998c99521f940c8ada01d3a329736758b1583e6d62dfc983da76c5e6ecf0ec71
- SSDEEP 98304:HcRIE/jonbpuAXxoWCgPHYgCsTpxQeMjLsAAa/7JNzJwjI5klUigj:IvonGleGZF6bUpj
- TLSH T13A46D006B2A442B9D067C178C592977BEBB1785517349BCB4390DB6D2F33AE25E3A330
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_3f8210fb70b65dc5e14b37c15cf8da4a_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njra.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_3f8210fb70b65dc5e14b37c15cf8da4a_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njra.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_3f8210fb70b65dc5e14b37c15cf8da4a_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader_vidar
- Size 5.5MB
- SHA256 9441741902519a0f026127c69b7727fd4b05fdfbdae815c8aa1ed05c005da8a5
- MD5 3f8210fb70b65dc5e14b37c15cf8da4a
- SHA1 787dc4ddec344ade04265470f10bb09d64f9d04e
- SHA512 1fbfc3fbb940dc7aac621929176c167b33ec6dce544c06fad02229b0f35a3138998c99521f940c8ada01d3a329736758b1583e6d62dfc983da76c5e6ecf0ec71
- SSDEEP 98304:HcRIE/jonbpuAXxoWCgPHYgCsTpxQeMjLsAAa/7JNzJwjI5klUigj:IvonGleGZF6bUpj
- TLSH T13A46D006B2A442B9D067C178C592977BEBB1785517349BCB4390DB6D2F33AE25E3A330
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Drops file in System32 directory