General
- Target 2026-08-16_f97421c54f90ff0d895e2de5eb3aec51_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc
- Size 633KB
- Sample260816-b4l2lsbk2x
- SHA256 e6e6161918ce38750dafd38bfd0c6c417953124ba446c668af9a776534c3921b
- MD5 f97421c54f90ff0d895e2de5eb3aec51
- SHA1 9f7efc50c5d86e00af635a9aa58a0f19df63d991
- SHA512 a354d1fd7ef030dfff153a6def235d6f83f2334da50d9323822ce421ea1da8b058aa6ebac62654ca9ed5e327f2da7b6eab60531e3da77915e69c03aa58fc2f7f
- SSDEEP 12288:+v6ciam2HUj49lJD1EhSj539JJ0qyxBlDetAqxSv+GeJ:eiGc45D1Ehyh9JuqybGG0
- TLSH T120D4C013B560907AF07246358969EB519B7DBC704F2097CF63C005AA6E706D0AF37BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_f97421c54f90ff0d895e2de5eb3aec51_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_f97421c54f90ff0d895e2de5eb3aec51_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_smoke-loader_stealc
- Size 633KB
- SHA256 e6e6161918ce38750dafd38bfd0c6c417953124ba446c668af9a776534c3921b
- MD5 f97421c54f90ff0d895e2de5eb3aec51
- SHA1 9f7efc50c5d86e00af635a9aa58a0f19df63d991
- SHA512 a354d1fd7ef030dfff153a6def235d6f83f2334da50d9323822ce421ea1da8b058aa6ebac62654ca9ed5e327f2da7b6eab60531e3da77915e69c03aa58fc2f7f
- SSDEEP 12288:+v6ciam2HUj49lJD1EhSj539JJ0qyxBlDetAqxSv+GeJ:eiGc45D1Ehyh9JuqybGG0
- TLSH T120D4C013B560907AF07246358969EB519B7DBC704F2097CF63C005AA6E706D0AF37BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
2Credentials in Registry
1