2026-08-10_3dece9b3aeccc089e151ce823d8ca28e_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

General

Target
2026-08-10_3dece9b3aeccc089e151ce823d8ca28e_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat
Size 853KB
Sample260810-ty883adj2z
SHA256 422a9bf06e374480fad6bd0218f46f3599146fcfd420ef9a700e9618d164b5dd
MD5 3dece9b3aeccc089e151ce823d8ca28e
SHA1 9cf126ac1e5a06ebe8e94e118d64a8c252f20238
SHA512 5868c6547a5a8001c419dfef12422394a05fe65b3f6990103059b97a38ab9bb5f08a158eece9132de7a4fad71856e890e73087250f8047408ece934a074213c2
SSDEEP 12288:WAukWmWn+aKcAMlluFlt7DXrPekVo803wKkk289PfH4lSztjhUHK9:W1FD+aKcf/CXE80AKkT89nP5jmHK9
TLSH
T16B0538213444C537E85211FA5A3C6A76916DFD360B7528C3E3C80E69BBF46C26B36E87
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_3dece9b3aeccc089e151ce823d8ca28e_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

File Explorer

2026-08-10_3dece9b3aeccc089e151ce823d8ca28e_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

.exe 853KB

2026-08-10_3dece9b3aeccc089e151ce823d8ca28e_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

IMPHASH 58edd1a3db973da4860423d91ab39c61
SHA256 422a9bf06e374480fad6bd0218f46f3599146fcfd420ef9a700e9618d164b5dd
MD5 3dece9b3aeccc089e151ce823d8ca28e
SHA1 9cf126ac1e5a06ebe8e94e118d64a8c252f20238
SHA512 5868c6547a5a8001c419dfef12422394a05fe65b3f6990103059b97a38ab9bb5f08a158eece9132de7a4fad71856e890e73087250f8047408ece934a074213c2
SSDEEP 12288:WAukWmWn+aKcAMlluFlt7DXrPekVo803wKkk289PfH4lSztjhUHK9:W1FD+aKcf/CXE80AKkT89nP5jmHK9
TLSH
T16B0538213444C537E85211FA5A3C6A76916DFD360B7528C3E3C80E69BBF46C26B36E87
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

917504

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dvs\p4\build\sw\rel\gpu_drv\r580\r582_12\drivers\nvcamera\redist\_out\wddm2_x86_release\ReShadeFXC32.pdb

kernel32

DeleteFileW SetEndOfFile UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetCurrentThreadId ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead LocalFree FormatMessageA GetLocaleInfoEx CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW AreFileApisANSI CloseHandle GetLastError GetProcAddress GetFileInformationByHandleEx MultiByteToWideChar WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo RaiseException RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle HeapReAlloc HeapSize WriteConsoleW

Name

.text

Size

693KB

Virtual Size

693KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

95KB

Virtual Size

95KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.msvcjmc

Size

1024B

Virtual Size

701B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

768B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

33KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.zero

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_3dece9b3aeccc089e151ce823d8ca28e_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

kernel32

generic