General
- Target 2026-09-24_295c98fa3a18cd92d6f239a4b74d66f6_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 333KB
- Sample260925-qagblasxhs
- SHA256 713430b55e68e830e4e644005bcf17ec68fe67be9173e2b689e40b809d550fc3
- MD5 295c98fa3a18cd92d6f239a4b74d66f6
- SHA1 1f213c5d11c7c2d7bbb32ee37f344800be82c487
- SHA512 8a40e1737b72c294ff87bd1353cf019f82d4617cdd3baec2fd6373a7d6325401ee075b4277f7464fdee628b43518b1036a937c92825741abc042a90b97cf8ca7
- SSDEEP 6144:mVfjmNkWl5tfsXY4hrU/Mm79iDSM/gDExD65DDlJAz8AOb3URXtl:I7+kI2trmMm79iDSqgQOJURXtl
- TLSH T158749E907691C072D9B215325E68DBB6493EBD114F2495DB73C81A7ECE303C2EB31B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_295c98fa3a18cd92d6f239a4b74d66f6_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_295c98fa3a18cd92d6f239a4b74d66f6_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 333KB
- SHA256 713430b55e68e830e4e644005bcf17ec68fe67be9173e2b689e40b809d550fc3
- MD5 295c98fa3a18cd92d6f239a4b74d66f6
- SHA1 1f213c5d11c7c2d7bbb32ee37f344800be82c487
- SHA512 8a40e1737b72c294ff87bd1353cf019f82d4617cdd3baec2fd6373a7d6325401ee075b4277f7464fdee628b43518b1036a937c92825741abc042a90b97cf8ca7
- SSDEEP 6144:mVfjmNkWl5tfsXY4hrU/Mm79iDSM/gDExD65DDlJAz8AOb3URXtl:I7+kI2trmMm79iDSqgQOJURXtl
- TLSH T158749E907691C072D9B215325E68DBB6493EBD114F2495DB73C81A7ECE303C2EB31B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.