2026-08-10_5b2483c9a2f45eff94159ad7e21058b0_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat

General

Target
2026-08-10_5b2483c9a2f45eff94159ad7e21058b0_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat
Size 268KB
Sample260810-c2me2adf62
SHA256 c9cfb60c076ff5b0a37f79cfe5a92e663ff617c4423b4f5284c037f6f4dba36d
MD5 5b2483c9a2f45eff94159ad7e21058b0
SHA1 a9dbfb8eec2f3e676d230b11ff1fd09dd805f2be
SHA512 3133bc57e5da57008ed08fc74ffe9050cc863736befc13c4bcb3f0b97b87d0eec49c5d77ac890523234e10f8187079ce64d3e3b84d3f575402316ea4bfad7203
SSDEEP 6144:t/UUYZ/wnZvavjCFducFnDq8zOgyVrB7qTuxdLampZ7o:FmonKpcFnD5IOuxVampZ7o
TLSH
T186446B22F1948471C862167605F4ABB5A77EAE705FB188CF77843F7E8B301C25B39A16
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_5b2483c9a2f45eff94159ad7e21058b0_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat

File Explorer

2026-08-10_5b2483c9a2f45eff94159ad7e21058b0_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat

.exe 268KB

2026-08-10_5b2483c9a2f45eff94159ad7e21058b0_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat

IMPHASH 953ddbeaf8260a562016edb32b006967
SHA256 c9cfb60c076ff5b0a37f79cfe5a92e663ff617c4423b4f5284c037f6f4dba36d
MD5 5b2483c9a2f45eff94159ad7e21058b0
SHA1 a9dbfb8eec2f3e676d230b11ff1fd09dd805f2be
SHA512 3133bc57e5da57008ed08fc74ffe9050cc863736befc13c4bcb3f0b97b87d0eec49c5d77ac890523234e10f8187079ce64d3e3b84d3f575402316ea4bfad7203
SSDEEP 6144:t/UUYZ/wnZvavjCFducFnDq8zOgyVrB7qTuxdLampZ7o:FmonKpcFnD5IOuxVampZ7o
TLSH
T186446B22F1948471C862167605F4ABB5A77EAE705FB188CF77843F7E8B301C25B39A16
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

58037

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MultiByteToWideChar LoadLibraryExA CreateFileW CloseHandle WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapAlloc HeapFree GetFileType HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle SetFilePointerEx HeapSize FlushFileBuffers GetConsoleOutputCP GetConsoleMode WriteConsoleW

version

VerQueryValueW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_5b2483c9a2f45eff94159ad7e21058b0_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat

kernel32

version

generic