General
- Target 2026-08-08_b1caaf52c1b463732b4987cca606f184_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_play_smoke-loader
- Size 849KB
- Sample260808-pxpqta1vht
- SHA256 fd3ec0160f9f70b680e9872e436cfae33064db53fe1a477de113b1c86a388d37
- MD5 b1caaf52c1b463732b4987cca606f184
- SHA1 cea0857af7ee1ab8679a2f021d92e90e88d7e4c3
- SHA512 63e34196be0fc3d50acd828665e787fa612973d49d6282179da4249ca1156680bad59293815180a791d4b6fd061b17ba01406d8f5afe1eedc1a3f52e4fdcb4d6
- SSDEEP 24576:V1vk1ag6kfgaIfwIxZa5JHl4yuYgtUEJlCR8tZUKn1V:uRfgaIfwUZa5cyxgtUQguNnf
- TLSH T1CF050201B5D18073D6B31A325D78BAA29AFCBD300921DAAF57D41D1EEE32680D539B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_b1caaf52c1b463732b4987cca606f184_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_play_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_b1caaf52c1b463732b4987cca606f184_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_play_smoke-loader.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_b1caaf52c1b463732b4987cca606f184_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_play_smoke-loader
- Size 849KB
- SHA256 fd3ec0160f9f70b680e9872e436cfae33064db53fe1a477de113b1c86a388d37
- MD5 b1caaf52c1b463732b4987cca606f184
- SHA1 cea0857af7ee1ab8679a2f021d92e90e88d7e4c3
- SHA512 63e34196be0fc3d50acd828665e787fa612973d49d6282179da4249ca1156680bad59293815180a791d4b6fd061b17ba01406d8f5afe1eedc1a3f52e4fdcb4d6
- SSDEEP 24576:V1vk1ag6kfgaIfwIxZa5JHl4yuYgtUEJlCR8tZUKn1V:uRfgaIfwUZa5cyxgtUQguNnf
- TLSH T1CF050201B5D18073D6B31A325D78BAA29AFCBD300921DAAF57D41D1EEE32680D539B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1