General
- Target 2026-08-05_a615af1f427752829a901421f4e0f65e_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc
- Size 631KB
- Sample260805-gba2jaar9x
- SHA256 a11ec479e922ba23a94828502ca4350b596429fbbf2b9e742efd9b5ccf43f828
- MD5 a615af1f427752829a901421f4e0f65e
- SHA1 1651c50f39fb349bdf2e6ec0c4edabb44c853e66
- SHA512 bf5547d31999fe690de3a0249083049fb9d107538332a0cd1375822a59f3c4fdcbe094310d0fe47f05f5105cde9d0c7b0d95ace2fc6c79dfd2f0cc08b7888582
- SSDEEP 12288:VEP6CTwNIu2sC3z0o0ARkY1d5PspdoyxBlDetAqxSv+ke:uiQw98310ARkCd5WdoybGk
- TLSH T17CD4C012B5A09076F07246358969FB559B7DBC700B2097CF63C405EA6E702D0AF37BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_a615af1f427752829a901421f4e0f65e_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_a615af1f427752829a901421f4e0f65e_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc
- Size 631KB
- SHA256 a11ec479e922ba23a94828502ca4350b596429fbbf2b9e742efd9b5ccf43f828
- MD5 a615af1f427752829a901421f4e0f65e
- SHA1 1651c50f39fb349bdf2e6ec0c4edabb44c853e66
- SHA512 bf5547d31999fe690de3a0249083049fb9d107538332a0cd1375822a59f3c4fdcbe094310d0fe47f05f5105cde9d0c7b0d95ace2fc6c79dfd2f0cc08b7888582
- SSDEEP 12288:VEP6CTwNIu2sC3z0o0ARkY1d5PspdoyxBlDetAqxSv+ke:uiQw98310ARkCd5WdoybGk
- TLSH T17CD4C012B5A09076F07246358969FB559B7DBC700B2097CF63C405EA6E702D0AF37BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
2Credentials in Registry
1