General
- Target 2026-09-03_a61b5e0731c4ee5c3e86a02a475b93b7_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 244KB
- Sample260905-19ft8aap9w
- SHA256 54a4d31da268f11106cc87827bbcadf0e01bf00f7f75f1d00a443ecd83f8366b
- MD5 a61b5e0731c4ee5c3e86a02a475b93b7
- SHA1 74aac8815294ad453e0e3b9161b912d2ba1555e2
- SHA512 e3a9961a004c6eac3028648a5436bbfa6592875c48ff9814cee14a40462a6cd28f368888ca5eb3efc0cb64f2bf8dc1424e23c8e904e356e7b20ef0b4cddea92e
- SSDEEP 6144:jFpkqml5a6EdkQxiUmRQColKGAOPQK2GwIgfx+qSfF0:5ppml5a6EdkQgUmR7G9QK3wJx+qSfF0
- TLSH T139349E11B5E180B3E9B3093409F5AE759ABEF9310B258A7F63D84F6D0F30681D226767
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_a61b5e0731c4ee5c3e86a02a475b93b7_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_a61b5e0731c4ee5c3e86a02a475b93b7_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 244KB
- SHA256 54a4d31da268f11106cc87827bbcadf0e01bf00f7f75f1d00a443ecd83f8366b
- MD5 a61b5e0731c4ee5c3e86a02a475b93b7
- SHA1 74aac8815294ad453e0e3b9161b912d2ba1555e2
- SHA512 e3a9961a004c6eac3028648a5436bbfa6592875c48ff9814cee14a40462a6cd28f368888ca5eb3efc0cb64f2bf8dc1424e23c8e904e356e7b20ef0b4cddea92e
- SSDEEP 6144:jFpkqml5a6EdkQxiUmRQColKGAOPQK2GwIgfx+qSfF0:5ppml5a6EdkQgUmR7G9QK3wJx+qSfF0
- TLSH T139349E11B5E180B3E9B3093409F5AE759ABEF9310B258A7F63D84F6D0F30681D226767
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.