2026-08-10_58761297df8267f2f58cdfd37db12795_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

General

Target
2026-08-10_58761297df8267f2f58cdfd37db12795_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat
Size 707KB
Sample260810-jagh2adl2w
SHA256 4019b803e1ae6be5cbbe4e0bd241d5421817146d9f4ba7e931fc2cb6cd93e0ab
MD5 58761297df8267f2f58cdfd37db12795
SHA1 6a7a41e3aa00990b8f9f6e99199cc8f9d7126dd1
SHA512 819ae735d9b9109c099cb38cb7d5ba7773a590c16262a8e07a8b45e4e1a4541e465543a1d4ed325ed85c5059c3e61b44cc7d28c03392103e24cbc53524b97b36
SSDEEP 12288:0g7AIDQUi3Qx8SMi8wF9Cp6cwuOunHi+mKfIQp9GiFR6WQpQoUByGncANapNwnvu:0KBDQr3IbCEcwTujRlpg1rsyt+ap2v+X
TLSH
T175F4020174848473E973253205E0E6B96B7EFC700E659D9F67980FAF0F31683AA356A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_58761297df8267f2f58cdfd37db12795_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

File Explorer

2026-08-10_58761297df8267f2f58cdfd37db12795_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

.exe 707KB

2026-08-10_58761297df8267f2f58cdfd37db12795_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

IMPHASH 6addd02d82538c2ca23958c8c292883b
SHA256 4019b803e1ae6be5cbbe4e0bd241d5421817146d9f4ba7e931fc2cb6cd93e0ab
MD5 58761297df8267f2f58cdfd37db12795
SHA1 6a7a41e3aa00990b8f9f6e99199cc8f9d7126dd1
SHA512 819ae735d9b9109c099cb38cb7d5ba7773a590c16262a8e07a8b45e4e1a4541e465543a1d4ed325ed85c5059c3e61b44cc7d28c03392103e24cbc53524b97b36
SSDEEP 12288:0g7AIDQUi3Qx8SMi8wF9Cp6cwuOunHi+mKfIQp9GiFR6WQpQoUByGncANapNwnvu:0KBDQr3IbCEcwTujRlpg1rsyt+ap2v+X
TLSH
T175F4020174848473E973253205E0E6B96B7EFC700E659D9F67980FAF0F31683AA356A7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

33857

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForSingleObject CreateThread VirtualAllocEx FreeConsole RaiseException InitOnceBeginInitialize InitOnceComplete CloseHandle GetCurrentThreadId ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW GetLastError FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetStringTypeW GetCPInfo IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead CreateFileW RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapFree HeapAlloc CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle HeapSize WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_58761297df8267f2f58cdfd37db12795_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

kernel32

generic