2026-08-15_79b7a719c287b38a3e4e0d57d85f6b92_amadey_cobalt-strike_coinminer_elex_luca-stealer_njrat_remcos_smoke-loader

General

Target
2026-08-15_79b7a719c287b38a3e4e0d57d85f6b92_amadey_cobalt-strike_coinminer_elex_luca-stealer_njrat_remcos_smoke-loader
Size 607KB
Sample260815-jdcdgsef55
SHA256 1075a08c26b2d991aa0acc87cc49fb70e004a84f252584950ffdf01d8681a2cf
MD5 79b7a719c287b38a3e4e0d57d85f6b92
SHA1 4772a9dfbcdb7290883395140479286037329e4e
SHA512 f60acc53b6ee7e162c7ace3fcb1f0d9709ab51d678f2f849b54323dfe44561d2dae5b09974807a35a2348c507b36605c66f763e769a66fd7004a7eaa0d0464df
SSDEEP 12288:Go+3+rz3WLCHxCwFk7l3o1fRGgVG1PHFrufef5ZMroBHZiZ:GdOvHfFc6dcJHF6faMroOZ
TLSH
T137D49E00BAE3C271E4B645304DF9E66A517DB9150B3489EBB3E80B2D5D715C12F32FAA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-15_79b7a719c287b38a3e4e0d57d85f6b92_amadey_cobalt-strike_coinminer_elex_luca-stealer_njrat_remcos_smoke-loader

File Explorer

2026-08-15_79b7a719c287b38a3e4e0d57d85f6b92_amadey_cobalt-strike_coinminer_elex_luca-stealer_njrat_remcos_smoke-loader

.exe 607KB

2026-08-15_79b7a719c287b38a3e4e0d57d85f6b92_amadey_cobalt-strike_coinminer_elex_luca-stealer_njrat_remcos_smoke-loader

IMPHASH d91e9b8add19a7c1b3b0df96bafc4983
SHA256 1075a08c26b2d991aa0acc87cc49fb70e004a84f252584950ffdf01d8681a2cf
MD5 79b7a719c287b38a3e4e0d57d85f6b92
SHA1 4772a9dfbcdb7290883395140479286037329e4e
SHA512 f60acc53b6ee7e162c7ace3fcb1f0d9709ab51d678f2f849b54323dfe44561d2dae5b09974807a35a2348c507b36605c66f763e769a66fd7004a7eaa0d0464df
SSDEEP 12288:Go+3+rz3WLCHxCwFk7l3o1fRGgVG1PHFrufef5ZMroBHZiZ:GdOvHfFc6dcJHF6faMroOZ
TLSH
T137D49E00BAE3C271E4B645304DF9E66A517DB9150B3489EBB3E80B2D5D715C12F32FAA
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

249035

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\FastCopy\src\install\Obj\ReleaseInst\setup.pdb

kernel32

ReadFile FindFirstFileW FindNextFileW WriteFile FindClose WaitForSingleObject CreateFileW DeleteFileW CloseHandle GetLocalTime GetFileSize GetSystemTimeAsFileTime CreateDirectoryW GetCommandLineW GetFullPathNameW RemoveDirectoryW GetModuleFileNameW GetFileAttributesW GetCurrentDirectoryW SetCurrentDirectoryW GetProcAddress CreateProcessW FreeLibrary CopyFileW SetDllDirectoryW MoveFileW GetEnvironmentVariableW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GetTempPathW Sleep GetLastError SetEvent GetVersionExA DeleteCriticalSection GetModuleHandleW GetEnvironmentStringsW IsDebuggerPresent SetLastError GetStdHandle WriteConsoleA OutputDebugStringA GetCurrentThreadId AttachConsole OutputDebugStringW WriteConsoleW GetFileType InterlockedIncrement GetTickCount SetThreadLocale GetCurrentProcess GetSystemDirectoryW OpenProcess CreateToolhelp32Snapshot Process32NextW GetUserDefaultLCID Process32FirstW LoadLibraryW GetCurrentProcessId GlobalMemoryStatusEx MultiByteToWideChar MoveFileExW WideCharToMultiByte ExitProcess SetFileTime UnmapViewOfFile GetFileAttributesExW CreateFileMappingA MapViewOfFile GetFileTime GetModuleFileNameA SetEndOfFile RaiseException CreateThread SetUnhandledExceptionFilter GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA GetStringTypeW EncodePointer DecodePointer GetCPInfo CompareStringW LCMapStringW GetLocaleInfoW InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter InitializeSListHead RtlUnwind LoadLibraryExW ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetACP HeapFree HeapAlloc HeapReAlloc IsValidLocale EnumSystemLocalesW FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA FreeEnvironmentStringsW GetProcessHeap SetStdHandle FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize SetFilePointerEx ReadConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-15_79b7a719c287b38a3e4e0d57d85f6b92_amadey_cobalt-strike_coinminer_elex_luca-stealer_njrat_remcos_smoke-loader

kernel32

generic