2026-08-23_aa9a4682c43af7c67b6681c2b520fa44_amadey_cobalt-strike_coinminer_elex_luca-stealer_lynx_njrat

General

Target
2026-08-23_aa9a4682c43af7c67b6681c2b520fa44_amadey_cobalt-strike_coinminer_elex_luca-stealer_lynx_njrat
Size 518KB
Sample260824-cgjteack41
SHA256 d485207f2bf735ec5380fdef425754245a6da15e6dd8e11da2ec9094085bc566
MD5 aa9a4682c43af7c67b6681c2b520fa44
SHA1 a7541edbf443c4de3846ed2d272ba93148677a05
SHA512 144f760d13a715f4ecf41ab1480f3c70145108ee0f4efd34098641ece98a728a7fb16fba10090edac8c801f7204532e9834cba4ba075013e3a76df9922462c26
SSDEEP 12288:lxNqcz1/IIIgEw2ZLZAuo/afPHyGVq++45Flx+eWC:lxzB/I9Auo/cvCmFlB
TLSH
T1B7B48D10F8918033D673287147BAE9B6187C68301F7596CF63C80A756F749D1AA3AE6F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-23_aa9a4682c43af7c67b6681c2b520fa44_amadey_cobalt-strike_coinminer_elex_luca-stealer_lynx_njrat

File Explorer

2026-08-23_aa9a4682c43af7c67b6681c2b520fa44_amadey_cobalt-strike_coinminer_elex_luca-stealer_lynx_njrat

.exe 518KB

2026-08-23_aa9a4682c43af7c67b6681c2b520fa44_amadey_cobalt-strike_coinminer_elex_luca-stealer_lynx_njrat

IMPHASH ddffff75aa76136bfb222169caae2671
SHA256 d485207f2bf735ec5380fdef425754245a6da15e6dd8e11da2ec9094085bc566
MD5 aa9a4682c43af7c67b6681c2b520fa44
SHA1 a7541edbf443c4de3846ed2d272ba93148677a05
SHA512 144f760d13a715f4ecf41ab1480f3c70145108ee0f4efd34098641ece98a728a7fb16fba10090edac8c801f7204532e9834cba4ba075013e3a76df9922462c26
SSDEEP 12288:lxNqcz1/IIIgEw2ZLZAuo/afPHyGVq++45Flx+eWC:lxzB/I9Auo/cvCmFlB
TLSH
T1B7B48D10F8918033D673287147BAE9B6187C68301F7596CF63C80A756F749D1AA3AE6F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

70342

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\My files\Учёба\Программирование\Projects\Сумма и количество цифр числа\Debug\Сумма и количество цифр числа.pdb

msvcp110d

?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?width@ios_base@std@@QAE_J_J@Z ?width@ios_base@std@@QBE_JXZ ?flags@ios_base@std@@QBEHXZ ?good@ios_base@std@@QBE_NXZ ?_Winerror_map@std@@YAPBDH@Z ?_Syserror_map@std@@YAPBDH@Z ?_Xout_of_range@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z ?_Xbad_alloc@std@@YAXXZ ?_Orphan_all@_Container_base12@std@@QAEXXZ ??1_Container_base12@std@@QAE@XZ ?uncaught_exception@std@@YA_NXZ ??0_Container_base12@std@@QAE@XZ ?_Debug_message@std@@YAXPB_W0I@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

msvcr110d

_cexit _configthreadlocale __setusermatherr _initterm_e _initterm __initenv _fmode _commode _except_handler4_common _crt_debugger_hook __crtUnhandledException __crtTerminateProcess ?terminate@@YAXXZ __crtSetUnhandledExceptionFilter _invoke_watson _controlfp_s wcscpy_s _wmakepath_s _wsplitpath_s _exit exit _CrtSetCheckCount __getmainargs _amsg_exit _XcptFilter ??1type_info@@UAE@XZ _CRT_RTC_INITW _onexit __dllonexit _calloc_dbg _CrtDbgReportW _unlock _lock __CxxFrameHandler3 _CxxThrowException setlocale memmove strlen memcpy ??3@YAXPAX@Z ??2@YAPAXI@Z _purecall __set_app_type system

kernel32

DecodePointer IsDebuggerPresent RaiseException GetLastError GetProcAddress LoadLibraryExW lstrlenA LoadLibraryW MultiByteToWideChar WideCharToMultiByte IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime HeapAlloc HeapFree GetProcessHeap VirtualQuery FreeLibrary GetModuleFileNameW GetModuleHandleW EncodePointer

Name

.textbss

Size

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

44KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-23_aa9a4682c43af7c67b6681c2b520fa44_amadey_cobalt-strike_coinminer_elex_luca-stealer_lynx_njrat

msvcp110d

msvcr110d

kernel32

generic