General
- Target 2026-08-06_893ea17302c7c871e8a6fc78f6eb028e_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-stealer_lynx_njrat
- Size 519KB
- Sample260806-btceeswsgz
- SHA256 778abcbc02f9e180a1dc4e162493fb224e51ff0c2092a79bd0ba03b244f5a18c
- MD5 893ea17302c7c871e8a6fc78f6eb028e
- SHA1 fc8f349ac9eb843d895e8809c7372cbdeeeba117
- SHA512 415ff6ee81b07345d87d4ca246a69042ec270c3accb62e525fa7b7b7284375a2d0dd6b8037d9ee4bc4f67cd958726ddc3b99d8d47a620d916219b9e594c2be81
- SSDEEP 6144:o3ks54n6UHOKEBuhqdcvLxJfsGltYy4lry9wbv9EpDqF2TCWkdJydzMP82LEcKxU:oK8KhquJfvz7Wvype4TFkdn89JBvaAfQ
- TLSH T1D9B4AE55FC9180B2D18211B566B99B771F3CB9204B218EDBB3C449799E203F0AF3A67D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_893ea17302c7c871e8a6fc78f6eb028e_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_893ea17302c7c871e8a6fc78f6eb028e_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-stealer_lynx_njrat
- Size 519KB
- SHA256 778abcbc02f9e180a1dc4e162493fb224e51ff0c2092a79bd0ba03b244f5a18c
- MD5 893ea17302c7c871e8a6fc78f6eb028e
- SHA1 fc8f349ac9eb843d895e8809c7372cbdeeeba117
- SHA512 415ff6ee81b07345d87d4ca246a69042ec270c3accb62e525fa7b7b7284375a2d0dd6b8037d9ee4bc4f67cd958726ddc3b99d8d47a620d916219b9e594c2be81
- SSDEEP 6144:o3ks54n6UHOKEBuhqdcvLxJfsGltYy4lry9wbv9EpDqF2TCWkdJydzMP82LEcKxU:oK8KhquJfvz7Wvype4TFkdn89JBvaAfQ
- TLSH T1D9B4AE55FC9180B2D18211B566B99B771F3CB9204B218EDBB3C449799E203F0AF3A67D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
3Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1