General
- Target 2026-08-23_a2e25f2cca965951f0973aa554c21353_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 412KB
- Sample260824-dkqa2asdqc
- SHA256 e50f749662443c5c26bf964541418b86d3e5db17fcb1cbd876cbe095f7db06e4
- MD5 a2e25f2cca965951f0973aa554c21353
- SHA1 25bd03a29c392208860bae87a81e8d7964af3c03
- SHA512 877503b7a4b8de80c29c2a9f3ddc854e9e748f77e2785c99ad92ae9b5dd68d732ee4cefb65b395886c1457964e69df0e2e7def6cf085d7a20ef1ca5d38b9bf78
- SSDEEP 12288:vj98dKI8Y2AISopmjr4nhigahEA5hN0QlGfrIorTpIsX0:bYouGDdrLE
- TLSH T16F945B217817D032D66191711F79FFF285ADAC269B7149DB77C00E36AE202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-23_a2e25f2cca965951f0973aa554c21353_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_a2e25f2cca965951f0973aa554c21353_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
amadey
Version
-
5.56
Botnet
-
9a8fe7
C2
-
http://microsoft-telemetry.cc
Attributes
-
strings_key
e46799b97b8218adc5106761a526cd35
-
url_paths
/cvdfnaFJBmC0/index.php
/cvdfnaFJBmC1/index.php
/cvdfnaFJBmC2/index.php
rc4.plain
Targets
-
- Target 2026-08-23_a2e25f2cca965951f0973aa554c21353_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader
- Size 412KB
- SHA256 e50f749662443c5c26bf964541418b86d3e5db17fcb1cbd876cbe095f7db06e4
- MD5 a2e25f2cca965951f0973aa554c21353
- SHA1 25bd03a29c392208860bae87a81e8d7964af3c03
- SHA512 877503b7a4b8de80c29c2a9f3ddc854e9e748f77e2785c99ad92ae9b5dd68d732ee4cefb65b395886c1457964e69df0e2e7def6cf085d7a20ef1ca5d38b9bf78
- SSDEEP 12288:vj98dKI8Y2AISopmjr4nhigahEA5hN0QlGfrIorTpIsX0:bYouGDdrLE
- TLSH T16F945B217817D032D66191711F79FFF285ADAC269B7149DB77C00E36AE202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10