2026-08-07_d6965fd455b0892c47ef4461a93479c3_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc

General

Target
2026-08-07_d6965fd455b0892c47ef4461a93479c3_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc
Size 632KB
Sample260807-3qd8dsvhng
SHA256 5c10453b7d77b851fd58d88e207e77d5f6c6a6ef77e62953d70021b8f457b3d2
MD5 d6965fd455b0892c47ef4461a93479c3
SHA1 13fbeac32d45899f82306ecc53e50488ac202d1a
SHA512 04073b4dd1c287e58b675e1d6f42352d0b7a2fa5cb1df9335dd676c364c540d4683a731edc08df4e47fcf5bb55700e707e3e3bf68ab54ac3ef4ead475d67f366
SSDEEP 12288:VEfdCzg427+2sC3z0o0ARU0Gem4zMlXddoyxBlDetAqxSv+keH:uVQglq8310ARU0Xm4QdoybGkK
TLSH
T156D4C012F5A0907AF17246358969EB519B7D7C700B2097CF63C405EA6E702D0AF37BAB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-07_d6965fd455b0892c47ef4461a93479c3_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc

File Explorer

2026-08-07_d6965fd455b0892c47ef4461a93479c3_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc

.exe 632KB

2026-08-07_d6965fd455b0892c47ef4461a93479c3_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc

IMPHASH a1998621839dade08f76afb3130c1ef2
SHA256 5c10453b7d77b851fd58d88e207e77d5f6c6a6ef77e62953d70021b8f457b3d2
MD5 d6965fd455b0892c47ef4461a93479c3
SHA1 13fbeac32d45899f82306ecc53e50488ac202d1a
SHA512 04073b4dd1c287e58b675e1d6f42352d0b7a2fa5cb1df9335dd676c364c540d4683a731edc08df4e47fcf5bb55700e707e3e3bf68ab54ac3ef4ead475d67f366
SSDEEP 12288:VEfdCzg427+2sC3z0o0ARU0Gem4zMlXddoyxBlDetAqxSv+keH:uVQglq8310ARU0Xm4QdoybGkK
TLSH
T156D4C012F5A0907AF17246358969EB519B7D7C700B2097CF63C405EA6E702D0AF37BAB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

126672

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetProcAddress GetCurrentProcess HeapSize QueryPerformanceCounter QueryPerformanceFrequency GetSystemTimePreciseAsFileTime Sleep GetCurrentThreadId WideCharToMultiByte MultiByteToWideChar GetStringTypeW GetLocaleInfoEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo IsProcessorFeaturePresent SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RaiseException RtlUnwind GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree GetStdHandle GetFileType GetModuleFileNameW GetModuleHandleExW WriteConsoleW ExitProcess TerminateProcess FreeLibrary WriteFile IsDebuggerPresent UnhandledExceptionFilter HeapFree HeapAlloc OutputDebugStringW GetTimeZoneInformation GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode CloseHandle VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadFile ReadConsoleW IsValidCodePage GetACP GetOEMCP HeapReAlloc FindClose FindFirstFileExW FindNextFileW GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle CreateFileW SetEndOfFile

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-07_d6965fd455b0892c47ef4461a93479c3_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc

kernel32

generic