2026-09-03_09121d219a0abc0f254c545f05ef2fe1_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

General

Target
2026-09-03_09121d219a0abc0f254c545f05ef2fe1_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat
Size 250KB
Sample260904-rx4k3staqa
SHA256 161ac028bdc1e2a4f3c8ba5823fdd9449ea2ca177b6b622f1c56f869a02ab1b6
MD5 09121d219a0abc0f254c545f05ef2fe1
SHA1 276f9f1042e9b883cb5cd715969b039e26ffa51d
SHA512 cf0b0385115e8c92a9350125a24f93249ae7f5fb70f65aa20fed4b68454f49aa01348565e1443ca011bd0f0627e7514876b9a74aa43f073a34c165c832913bd8
SSDEEP 6144:eO6cjbe7jOkjw9AnKBsMAUAEPVrW7P+nvWbHiH:eAjbe7w9AnWsjPWnvJH
TLSH
T11944E005B5D0C4B2D5B219370438DB765A3EFE300E24AE9B6794067ADF313C19636E6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-03_09121d219a0abc0f254c545f05ef2fe1_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

File Explorer

2026-09-03_09121d219a0abc0f254c545f05ef2fe1_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

.exe 250KB

2026-09-03_09121d219a0abc0f254c545f05ef2fe1_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

IMPHASH f4ec09b7db8e44252d6854622ef8db28
SHA256 161ac028bdc1e2a4f3c8ba5823fdd9449ea2ca177b6b622f1c56f869a02ab1b6
MD5 09121d219a0abc0f254c545f05ef2fe1
SHA1 276f9f1042e9b883cb5cd715969b039e26ffa51d
SHA512 cf0b0385115e8c92a9350125a24f93249ae7f5fb70f65aa20fed4b68454f49aa01348565e1443ca011bd0f0627e7514876b9a74aa43f073a34c165c832913bd8
SSDEEP 6144:eO6cjbe7jOkjw9AnKBsMAUAEPVrW7P+nvWbHiH:eAjbe7w9AnWsjPWnvJH
TLSH
T11944E005B5D0C4B2D5B219370438DB765A3EFE300E24AE9B6794067ADF313C19636E6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6434

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileW DeleteFileW WriteFile GetTempPathW CloseHandle WaitForSingleObject Sleep WriteConsoleW SetEndOfFile ReadConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException GetStdHandle GetModuleFileNameW ExitProcess GetModuleHandleExW HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW LCMapStringW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx HeapSize HeapReAlloc ReadFile DecodePointer

shell32

ShellExecuteExW

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-03_09121d219a0abc0f254c545f05ef2fe1_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat

kernel32

shell32

generic