General
- Target 2026-09-07_ab06f5c6d7c246e9dcdbc7cec2f23527_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 252KB
- Sample260908-kgj36sec43
- SHA256 0f98fabe27e2f80e8e08dd1f7c3ad857b820a949354963d5116a84cb183a7b63
- MD5 ab06f5c6d7c246e9dcdbc7cec2f23527
- SHA1 d6c52911eace4bc8e8a71eed6bb818bf9cdc2f0d
- SHA512 bcfa292e63ab6213751e7879d20c9b9daf3ba0ff73c59e32211ba4a57605c4677fb69d62491ef47a51611cb2268c3def3ad1d03709fc55f04debe0416a4fd908
- SSDEEP 3072:Rvy3AFQq8sYLBR5bYFlz4ViCbxMMBu6V/Nzs+BPQRgp48+nSLrvsAwp1bjGxtuwF:YLn5bYbzEVzBjNwMQI48+nkrBPZxp
- TLSH T1BD447E10B891C036D9770977DDB98B7D9A3DBC500B6969CBA3C81DEECE605D0BB3160A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-07_ab06f5c6d7c246e9dcdbc7cec2f23527_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_ab06f5c6d7c246e9dcdbc7cec2f23527_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_ab06f5c6d7c246e9dcdbc7cec2f23527_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 252KB
- SHA256 0f98fabe27e2f80e8e08dd1f7c3ad857b820a949354963d5116a84cb183a7b63
- MD5 ab06f5c6d7c246e9dcdbc7cec2f23527
- SHA1 d6c52911eace4bc8e8a71eed6bb818bf9cdc2f0d
- SHA512 bcfa292e63ab6213751e7879d20c9b9daf3ba0ff73c59e32211ba4a57605c4677fb69d62491ef47a51611cb2268c3def3ad1d03709fc55f04debe0416a4fd908
- SSDEEP 3072:Rvy3AFQq8sYLBR5bYFlz4ViCbxMMBu6V/Nzs+BPQRgp48+nSLrvsAwp1bjGxtuwF:YLn5bYbzEVzBjNwMQI48+nkrBPZxp
- TLSH T1BD447E10B891C036D9770977DDB98B7D9A3DBC500B6969CBA3C81DEECE605D0BB3160A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.