General
- Target 2026-08-12_c35990117e263e9526da638126799733_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 244KB
- Sample260812-yr9cpsef23
- SHA256 50cb46ce9596fc6c1930ecfed727cec6c87d4abd763268868b663ea338ec6287
- MD5 c35990117e263e9526da638126799733
- SHA1 582544f79f6d9a1ad98e84f06f5a4b794afc13f3
- SHA512 3f47b044f3dd29ae6eef384aad6b058f4bc0fa61dc32d358c26a96cfce2bac9681a24bbca396ad04f5cc2b46d1975cc0b1ff2e4cb9e56d99c1d29694b89f0036
- SSDEEP 6144:1VfjmN2qml5a6EdkQxiUmRQColKGAOPQK2GwIgfx+qSfF0:T7+Hml5a6EdkQgUmR7G9QK3wJx+qSfF0
- TLSH T16334AE12B5E180B3E9B30D3449F4AE759ABDB9310B258A7F23E85B6D1F30681D216773
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_c35990117e263e9526da638126799733_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_c35990117e263e9526da638126799733_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 244KB
- SHA256 50cb46ce9596fc6c1930ecfed727cec6c87d4abd763268868b663ea338ec6287
- MD5 c35990117e263e9526da638126799733
- SHA1 582544f79f6d9a1ad98e84f06f5a4b794afc13f3
- SHA512 3f47b044f3dd29ae6eef384aad6b058f4bc0fa61dc32d358c26a96cfce2bac9681a24bbca396ad04f5cc2b46d1975cc0b1ff2e4cb9e56d99c1d29694b89f0036
- SSDEEP 6144:1VfjmN2qml5a6EdkQxiUmRQColKGAOPQK2GwIgfx+qSfF0:T7+Hml5a6EdkQgUmR7G9QK3wJx+qSfF0
- TLSH T16334AE12B5E180B3E9B30D3449F4AE759ABDB9310B258A7F23E85B6D1F30681D216773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.