General
- Target 2026-08-09_15de406b70bf90ef234762791391449d_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 244KB
- Sample260809-xfp91sxsbt
- SHA256 f8d02ff8edecbe78dee5ec2c657476b39bfd236b0097a6e262eac68ef0285b85
- MD5 15de406b70bf90ef234762791391449d
- SHA1 d474f1ea8cda9ae05d72dd66de697aa56c1d0490
- SHA512 a200cd42c332a7f9f849ce050f10ea4ace0994401bacdedcfc376f898447c8e0a7ea034a48a291722fe8a53f10bd259ff5e2d502fac46027007872fa001e1ccd
- SSDEEP 6144:rVfjmN9qml5a6EdkQxiUmRQColKGAOPQK2GwIgfx+qSfF0:B7+Uml5a6EdkQgUmR7G9QK3wJx+qSfF0
- TLSH T1AD349E12B5D180B3E9B30D3449F4AE759ABEB9310B258A7F63D84F6D1F30681921A773
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_15de406b70bf90ef234762791391449d_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_15de406b70bf90ef234762791391449d_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 244KB
- SHA256 f8d02ff8edecbe78dee5ec2c657476b39bfd236b0097a6e262eac68ef0285b85
- MD5 15de406b70bf90ef234762791391449d
- SHA1 d474f1ea8cda9ae05d72dd66de697aa56c1d0490
- SHA512 a200cd42c332a7f9f849ce050f10ea4ace0994401bacdedcfc376f898447c8e0a7ea034a48a291722fe8a53f10bd259ff5e2d502fac46027007872fa001e1ccd
- SSDEEP 6144:rVfjmN9qml5a6EdkQxiUmRQColKGAOPQK2GwIgfx+qSfF0:B7+Uml5a6EdkQgUmR7G9QK3wJx+qSfF0
- TLSH T1AD349E12B5D180B3E9B30D3449F4AE759ABEB9310B258A7F63D84F6D1F30681921A773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.