2026-08-20_7110f7a92a348e40043c018a7e80a590_amadey_cobalt-strike_elex_luca-stealer_lynx_medusalocker_njrat_smoke-loader

General

Target
2026-08-20_7110f7a92a348e40043c018a7e80a590_amadey_cobalt-strike_elex_luca-stealer_lynx_medusalocker_njrat_smoke-loader
Size 453KB
Sample260820-sqlblaen4x
SHA256 d1054dc3dc9c6a7a67e53ef6e5d5092b2c530c378baa79f8548e92db6cef1448
MD5 7110f7a92a348e40043c018a7e80a590
SHA1 7da8c8051df1d508db9e3a5956c07d928739f87b
SHA512 1d6aa94aac71fe5e6d4656a987d322ed467a9760f695775c6269497c3c231b1216e9ca1e7536d4579dff2fda5963c3e3136885c64ee697c70e34b5b279135312
SSDEEP 12288:LWwdSucAiHbBYWwn41R49vzRbBoRmjzxNblqKXEvB+6vQy:LWwsucAuYrnq4eR6NblXWBTz
TLSH
T13FA4AE10B4A3C032CA7642705D74F75615BEB9304F2A5AEBB3D84A2D2F701D26B3DA67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_7110f7a92a348e40043c018a7e80a590_amadey_cobalt-strike_elex_luca-stealer_lynx_medusalocker_njrat_smoke-loader

File Explorer

2026-08-20_7110f7a92a348e40043c018a7e80a590_amadey_cobalt-strike_elex_luca-stealer_lynx_medusalocker_njrat_smoke-loader

.exe 453KB

2026-08-20_7110f7a92a348e40043c018a7e80a590_amadey_cobalt-strike_elex_luca-stealer_lynx_medusalocker_njrat_smoke-loader

IMPHASH ea1edf984279502673e867f240955c60
SHA256 d1054dc3dc9c6a7a67e53ef6e5d5092b2c530c378baa79f8548e92db6cef1448
MD5 7110f7a92a348e40043c018a7e80a590
SHA1 7da8c8051df1d508db9e3a5956c07d928739f87b
SHA512 1d6aa94aac71fe5e6d4656a987d322ed467a9760f695775c6269497c3c231b1216e9ca1e7536d4579dff2fda5963c3e3136885c64ee697c70e34b5b279135312
SSDEEP 12288:LWwdSucAiHbBYWwn41R49vzRbBoRmjzxNblqKXEvB+6vQy:LWwsucAuYrnq4eR6NblXWBTz
TLSH
T13FA4AE10B4A3C032CA7642705D74F75615BEB9304F2A5AEBB3D84A2D2F701D26B3DA67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

86820

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Программирование\CPP\Программное обеспечение\DS4 emulator\Release\DS4Emulator.pdb

kernel32

GetModuleFileNameA FindFirstFileA SetConsoleTitleA GetUserDefaultLangID FindNextFileA FindClose Sleep GetModuleHandleExA LoadLibraryA GetProcAddress FreeLibrary GetConsoleWindow SetEndOfFile WriteConsoleW HeapSize SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW HeapReAlloc ReadConsoleW ReadFile GetFileAttributesExW CreateProcessW GetExitCodeProcess GetConsoleMode GetConsoleCP FlushFileBuffers GetFileType SetFilePointerEx GetFileSizeEx EnumSystemLocalesW GetUserDefaultLCID IsValidLocale HeapFree HeapAlloc DeviceIoControl CreateFileW CreateEventW GetLastError SetEvent CloseHandle ResetEvent GetOverlappedResult QueryPerformanceCounter QueryPerformanceFrequency WideCharToMultiByte EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection GetCurrentThreadId DuplicateHandle WaitForSingleObjectEx GetCurrentProcess SwitchToThread GetCurrentThread GetExitCodeThread SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount GetModuleHandleW EncodePointer DecodePointer MultiByteToWideChar CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetCurrentProcessId InitializeSListHead CreateTimerQueue SignalObjectAndWait CreateThread SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait GetThreadTimes FreeLibraryAndExitThread GetModuleFileNameW GetModuleHandleA LoadLibraryExW GetVersionExW VirtualAlloc VirtualProtect VirtualFree ReleaseSemaphore InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx LoadLibraryW WaitForSingleObject RtlUnwind RaiseException ExitThread GetModuleHandleExW ExitProcess GetStdHandle WriteFile GetCommandLineA GetCommandLineW

user32

CopyIcon GetCursorPos SetCursorPos SetForegroundWindow FindWindowA SetSystemCursor GetDesktopWindow MoveWindow LoadCursorFromFileA GetWindowRect GetForegroundWindow IsWindowVisible SetWindowPos SetActiveWindow LoadCursorA GetSystemMetrics ShowWindow GetAsyncKeyState

wsock32

WSACleanup inet_ntoa htons recvfrom socket WSAStartup closesocket bind

setupapi

SetupDiEnumDeviceInterfaces SetupDiDestroyDeviceInfoList SetupDiGetClassDevsW SetupDiGetDeviceInterfaceDetailW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-20_7110f7a92a348e40043c018a7e80a590_amadey_cobalt-strike_elex_luca-stealer_lynx_medusalocker_njrat_smoke-loader

kernel32

user32

wsock32

setupapi

generic