General
- Target 2026-08-16_407a9b372d13f036a9424eb4255437f7_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 244KB
- Sample260816-r28qlaea53
- SHA256 03a513dc0c9c3a58b4724353ab0fce941e52966164523d99b1d9cdc47e930211
- MD5 407a9b372d13f036a9424eb4255437f7
- SHA1 1cb335bb96f02d0873901fddc4e62aa9ff258ca7
- SHA512 36e3b9bdd3759763688d5905fcccd02e4e98975ab3d043575a82cdcdc808a89bab84ba5a0eaf5c27bf0735b62492c38384f0c87d2636e3cabe81cf55d3629491
- SSDEEP 6144:lVfjmN9qml5a6EdkQxiUmRQColKGAOPQK2GwIgfx+qSfF0:D7+Uml5a6EdkQgUmR7G9QK3wJx+qSfF0
- TLSH T1B3349E12B5D280B3EDB3093449F4AE759ABDB9310B258A7F63D84B6D1F306C19216B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_407a9b372d13f036a9424eb4255437f7_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_407a9b372d13f036a9424eb4255437f7_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 244KB
- SHA256 03a513dc0c9c3a58b4724353ab0fce941e52966164523d99b1d9cdc47e930211
- MD5 407a9b372d13f036a9424eb4255437f7
- SHA1 1cb335bb96f02d0873901fddc4e62aa9ff258ca7
- SHA512 36e3b9bdd3759763688d5905fcccd02e4e98975ab3d043575a82cdcdc808a89bab84ba5a0eaf5c27bf0735b62492c38384f0c87d2636e3cabe81cf55d3629491
- SSDEEP 6144:lVfjmN9qml5a6EdkQxiUmRQColKGAOPQK2GwIgfx+qSfF0:D7+Uml5a6EdkQgUmR7G9QK3wJx+qSfF0
- TLSH T1B3349E12B5D280B3EDB3093449F4AE759ABDB9310B258A7F63D84B6D1F306C19216B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.