2026-09-16_e10cbb1de7b32491b2f8fbcaf4cc2f16_amadey_cobalt-strike_elex_floxif_luca-stealer_lynx_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-16_e10cbb1de7b32491b2f8fbcaf4cc2f16_amadey_cobalt-strike_elex_floxif_luca-stealer_lynx_njrat
Size 855KB
Sample260916-tm5rha1vev
SHA256 8346d9bb5eb868abb3c4bb50bff1c899e94d0f6c53bf1751e4878ebd44e8bd70
MD5 e10cbb1de7b32491b2f8fbcaf4cc2f16
SHA1 8cac23f2475812f436e9badf3d0a42f68ee791cf
SHA512 49bef8a6325501f6356d3a54067c809bc1e8f68e565381b3900ab8a764f96fa49e5cba9c6ae0237d6436b8d554286c3f7697acd2d10cb963d1e9db55f23c8cf5
SSDEEP 24576:2yKxWOuNHY3Hg4S2O7htkWfn7JVNgvO94rEH7L:2MN4Xg4S7Vt37j9z
TLSH
T16415F1C1BE80BAF2C12101313645A7BE56FF7D390E4246CB67D3BE9D8E3C481A529B56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-16_e10cbb1de7b32491b2f8fbcaf4cc2f16_amadey_cobalt-strike_elex_floxif_luca-stealer_lynx_njrat

File Explorer

2026-09-16_e10cbb1de7b32491b2f8fbcaf4cc2f16_amadey_cobalt-strike_elex_floxif_luca-stealer_lynx_njrat

.exe 855KB

2026-09-16_e10cbb1de7b32491b2f8fbcaf4cc2f16_amadey_cobalt-strike_elex_floxif_luca-stealer_lynx_njrat

IMPHASH 366665a8afe76046e7aff35b7aaab5de
SHA256 8346d9bb5eb868abb3c4bb50bff1c899e94d0f6c53bf1751e4878ebd44e8bd70
MD5 e10cbb1de7b32491b2f8fbcaf4cc2f16
SHA1 8cac23f2475812f436e9badf3d0a42f68ee791cf
SHA512 49bef8a6325501f6356d3a54067c809bc1e8f68e565381b3900ab8a764f96fa49e5cba9c6ae0237d6436b8d554286c3f7697acd2d10cb963d1e9db55f23c8cf5
SSDEEP 24576:2yKxWOuNHY3Hg4S2O7htkWfn7JVNgvO94rEH7L:2MN4Xg4S7Vt37j9z
TLSH
T16415F1C1BE80BAF2C12101313645A7BE56FF7D390E4246CB67D3BE9D8E3C481A529B56
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

139979

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\devel\ark7\bin.win32\bdzsfx.x86.pdb

kernel32

lstrcmpW MulDiv SetFilePointerEx GetFileSizeEx SetFileAttributesW DeleteFileW SetFileTime SetEndOfFile WriteFile lstrcpyW GetVersion SetFileInformationByHandle DeviceIoControl SetLastError lstrlenW GetFullPathNameW lstrcatW WaitForSingleObject InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection CreateEventW SetEvent ResetEvent CreateDirectoryW GetCurrentDirectoryW SetCurrentDirectoryW CreateHardLinkW RemoveDirectoryW CreateSymbolicLinkW VirtualAlloc VirtualFree GetModuleFileNameW GetFileAttributesW GetCurrentThread FileTimeToSystemTime GetTimeZoneInformation SystemTimeToTzSpecificLocalTime Sleep IsNormalizedString NormalizeString GlobalMemoryStatusEx CompareStringW CreateFileA GetDriveTypeW FlushFileBuffers GetTickCount FindClose GlobalFree GetSystemDirectoryW LoadLibraryW LocalFree MultiByteToWideChar lstrcmpiW InitializeCriticalSectionEx RaiseException GetCurrentThreadId GetUserDefaultLangID DecodePointer GetConsoleOutputCP GetStringTypeW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW SetStdHandle GetConsoleMode LCMapStringW GetStdHandle GetCommandLineW GetCommandLineA ExitProcess GetFileType FreeLibraryAndExitThread ExitThread CreateThread TlsFree WriteConsoleW TlsSetValue TlsGetValue TlsAlloc RtlUnwind GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetStartupInfoW TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter WaitForSingleObjectEx InitializeCriticalSectionAndSpinCount LoadLibraryExA IsProcessorFeaturePresent FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead WideCharToMultiByte ReadFile CreateFileW FindResourceExW LoadResource FindResourceW LockResource SizeofResource GetProcessHeap HeapAlloc HeapFree HeapReAlloc HeapSize HeapDestroy GetLastError FreeLibrary lstrcpynW GetModuleHandleExW CloseHandle GetCurrentProcess GetModuleHandleW LoadLibraryExW GetProcAddress EncodePointer OutputDebugStringW IsDebuggerPresent

user32

SendMessageW RegisterWindowMessageW GetDC SetFocus EndDialog KillTimer EnableWindow SetTimer SetDlgItemTextW PostMessageW MessageBoxW GetWindow MonitorFromWindow GetMonitorInfoW GetClientRect LoadIconW GetWindowTextW DialogBoxParamW UnregisterClassW GetActiveWindow CharNextW DispatchMessageW TranslateMessage PostQuitMessage PeekMessageW InvalidateRect ScreenToClient GetDlgItem CreateWindowExW DestroyWindow MoveWindow EnumChildWindows SetWindowLongW GetWindowLongW FindWindowExW GetClassNameW MapWindowPoints SetWindowTextW GetDlgCtrlID GetParent SetWindowPos SystemParametersInfoW MonitorFromPoint SetProcessDPIAware GetWindowRect ReleaseDC GetWindowTextLengthW

gdi32

CreateFontW DeleteObject GetStockObject GetDeviceCaps GetObjectW

advapi32

RegDeleteValueW RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegEnumKeyExW RegQueryInfoKeyW RegCloseKey RegDeleteKeyW AreAllAccessesGranted AccessCheck OpenThreadToken RevertToSelf ImpersonateSelf GetFileSecurityW GetTokenInformation OpenProcessToken

shell32

CommandLineToArgvW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW

ole32

CoInitialize CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree CoCreateInstance CoUninitialize

oleaut32

VarUI4FromStr

shlwapi

PathCanonicalizeW PathIsDirectoryW

Name

.text

Size

233KB

Virtual Size

233KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

48KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

ve_share

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-16_e10cbb1de7b32491b2f8fbcaf4cc2f16_amadey_cobalt-strike_elex_floxif_luca-stealer_lynx_njrat

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

generic