General
- Target 2026-08-23_49887a33bcce115c6d7cd9a8ba784c77_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 623KB
- Sample260824-ppvxvsgl5w
- SHA256 63e1d52eb61923373e09bf7f8eeed820e045030fe2948f39da6fd1ec295b165c
- MD5 49887a33bcce115c6d7cd9a8ba784c77
- SHA1 df77eb765e07723896533c3fcb82191d73b68da2
- SHA512 2a47720e6003a95314be23fc99fced37a75fa36fee946202588af2ed3128764bdb01ed7be6b0b884b5417fbb321fe38340e11bc59ddb43a9d445876be3b32571
- SSDEEP 12288:cPCxiKjIwCZsFYHTC4yNirtFYq9tSyparsieykx2Z5LxNToyP9Oyg:cP3nZsFY/yNirtF/9QLkATbT/
- TLSH T1ADD48D01B6A1D034F4F716F58EBE627D983CBEA0172584DB63C426ED5A35AD0AD3072B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_49887a33bcce115c6d7cd9a8ba784c77_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_49887a33bcce115c6d7cd9a8ba784c77_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
rhadamanthys
C2
-
http://193.42.33.73/rhad/3oklcj.ngok
Targets
-
- Target 2026-08-23_49887a33bcce115c6d7cd9a8ba784c77_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 623KB
- SHA256 63e1d52eb61923373e09bf7f8eeed820e045030fe2948f39da6fd1ec295b165c
- MD5 49887a33bcce115c6d7cd9a8ba784c77
- SHA1 df77eb765e07723896533c3fcb82191d73b68da2
- SHA512 2a47720e6003a95314be23fc99fced37a75fa36fee946202588af2ed3128764bdb01ed7be6b0b884b5417fbb321fe38340e11bc59ddb43a9d445876be3b32571
- SSDEEP 12288:cPCxiKjIwCZsFYHTC4yNirtFYq9tSyparsieykx2Z5LxNToyP9Oyg:cP3nZsFY/yNirtF/9QLkATbT/
- TLSH T1ADD48D01B6A1D034F4F716F58EBE627D983CBEA0172584DB63C426ED5A35AD0AD3072B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detect rhadamanthys stealer shellcode
-
Family: Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.