2026-08-24_7544bc22211629c705bf9d778cc00479_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_vidar

General

Target
2026-08-24_7544bc22211629c705bf9d778cc00479_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_vidar
Size 538KB
Sample260825-map2ysgq8w
SHA256 4a69b0742f47207178fb84b6470429b536a3b6250c37a248cff1b68444d26e63
MD5 7544bc22211629c705bf9d778cc00479
SHA1 47259a54213078a59ae67c9aee49e50c87312029
SHA512 b9a4c2d96bb691d5a978c2dfbb16c4724e5607ab0bc3fbd8a5d87f2185291d01c48711fd3c83ba2c4b28540d7514cb36b499721012d2c24babb8e59592f7a2a7
SSDEEP 6144:O578AljUJEXLq7xhZLxj7EtVCUpysNR3VigbJL4eY9TDOJIFqB6fpvee+2s4S:O5YAljUKb0F7EtZyKlNbJl0TDnpS4S
TLSH
T1D2C4F10275C1C036D57215324AF4DB709E3EBCB04E659EDF2B980FAE4F34291DA25A6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-24_7544bc22211629c705bf9d778cc00479_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_vidar

File Explorer

2026-08-24_7544bc22211629c705bf9d778cc00479_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_vidar

.exe 538KB

2026-08-24_7544bc22211629c705bf9d778cc00479_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_vidar

IMPHASH d10af643340e1121562abe3e6bd5b0e1
SHA256 4a69b0742f47207178fb84b6470429b536a3b6250c37a248cff1b68444d26e63
MD5 7544bc22211629c705bf9d778cc00479
SHA1 47259a54213078a59ae67c9aee49e50c87312029
SHA512 b9a4c2d96bb691d5a978c2dfbb16c4724e5607ab0bc3fbd8a5d87f2185291d01c48711fd3c83ba2c4b28540d7514cb36b499721012d2c24babb8e59592f7a2a7
SSDEEP 6144:O578AljUJEXLq7xhZLxj7EtVCUpysNR3VigbJL4eY9TDOJIFqB6fpvee+2s4S:O5YAljUKb0F7EtZyKlNbJl0TDnpS4S
TLSH
T1D2C4F10275C1C036D57215324AF4DB709E3EBCB04E659EDF2B980FAE4F34291DA25A6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

28498

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AttachConsole MultiByteToWideChar GetStringTypeW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW CreateFileW RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapAlloc HeapFree GetFileType LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileSizeEx SetFilePointerEx CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap ReadConsoleW HeapSize WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-24_7544bc22211629c705bf9d778cc00479_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_vidar

kernel32

generic