2026-08-10_b17d74fb8b1d692985e93ce1970d859f_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

General

Target
2026-08-10_b17d74fb8b1d692985e93ce1970d859f_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat
Size 379KB
Sample260810-tmfsdacq2v
SHA256 4c5ba4dd5144c1098fe17bb8325605b424b8fc94ea3ed3aafe1d03eb5e65e6ac
MD5 b17d74fb8b1d692985e93ce1970d859f
SHA1 753b190d0aad0d8785df02fabdd8b896db615caf
SHA512 9357b90f0fbf4252e67300336c233cf2bbcce912ea8e4784a92d36a423635e99c6fe582afefbb59380e64fa996ede6a160b2bc8679b41a2b7d3394456e077866
SSDEEP 6144:SsETJFs+qfmz7+VYOhOQmijHLec2wUXTxB3FPRjUoGfah+VGMde5NfeVwjKYiOn:SsENFs+qfm/+uOhnmgHLec2wUX3VPRg4
TLSH
T158849D127980D032D4B310300FA5EB766ABEF5306F6259CB63E45D6E8B34AC29735B5B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_b17d74fb8b1d692985e93ce1970d859f_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

File Explorer

2026-08-10_b17d74fb8b1d692985e93ce1970d859f_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

.exe 379KB

2026-08-10_b17d74fb8b1d692985e93ce1970d859f_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

IMPHASH 906eb11c235a6b43805510919a2aff5b
SHA256 4c5ba4dd5144c1098fe17bb8325605b424b8fc94ea3ed3aafe1d03eb5e65e6ac
MD5 b17d74fb8b1d692985e93ce1970d859f
SHA1 753b190d0aad0d8785df02fabdd8b896db615caf
SHA512 9357b90f0fbf4252e67300336c233cf2bbcce912ea8e4784a92d36a423635e99c6fe582afefbb59380e64fa996ede6a160b2bc8679b41a2b7d3394456e077866
SSDEEP 6144:SsETJFs+qfmz7+VYOhOQmijHLec2wUXTxB3FPRjUoGfah+VGMde5NfeVwjKYiOn:SsENFs+qfm/+uOhnmgHLec2wUX3VPRg4
TLSH
T158849D127980D032D4B310300FA5EB766ABEF5306F6259CB63E45D6E8B34AC29735B5B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

389120

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dvs\p4\build\sw\rel\gpu_drv\r580\r582_12\drivers\nvcamera\redist\_out\wddm2_x86_release\NvCameraEnable.pdb

kernel32

ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead OutputDebugStringW InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection Sleep FreeLibrary GetProcAddress VerSetConditionMask ExpandEnvironmentStringsW CreateFileW GetFileAttributesW GetFullPathNameW CloseHandle GetLastError SetLastError GetSystemDirectoryW GetModuleFileNameA GetModuleFileNameW GetModuleHandleA LoadLibraryExW LocalAlloc LocalFree lstrcmpW VerifyVersionInfoW WideCharToMultiByte MultiByteToWideChar InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx GetLocaleInfoEx GetStringTypeW CompareStringEx GetCPInfo RaiseException RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle HeapReAlloc GetTimeZoneInformation FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx HeapSize WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_b17d74fb8b1d692985e93ce1970d859f_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

kernel32

generic