General
- Target 2026-09-26_6b1c2278174e4a0593939e3944abf335_amadey_cobalt-strike_elex_luca-stealer_njrat_play
- Size 196KB
- Sample260926-zzyfvast2l
- SHA256 4887fc429ca6520a40763c187dd90499537e1b69bd3a320f8a19d08196664364
- MD5 6b1c2278174e4a0593939e3944abf335
- SHA1 7ec3658d4232428c0e12dfab82b71a4f7d0f0427
- SHA512 774437040673dd49782e7893b4784e4d406f8c4dd57f52c8c21791fe45b618170287e69f52862730da0e9cd38998d55d586d29a918690acff21adf9cb4d5025b
- SSDEEP 6144:KwgDUqAcsDk3lRJNmOMl394NOw2C2wk1k:SDUqdsDk1RJ7WUek
- TLSH T1B1146A14B6E2C032E5B3063429F4DBB69A7EB9710F70A9DF6784173E09306D19A34B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-26_6b1c2278174e4a0593939e3944abf335_amadey_cobalt-strike_elex_luca-stealer_njrat_play.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-26_6b1c2278174e4a0593939e3944abf335_amadey_cobalt-strike_elex_luca-stealer_njrat_play.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-26_6b1c2278174e4a0593939e3944abf335_amadey_cobalt-strike_elex_luca-stealer_njrat_play
- Size 196KB
- SHA256 4887fc429ca6520a40763c187dd90499537e1b69bd3a320f8a19d08196664364
- MD5 6b1c2278174e4a0593939e3944abf335
- SHA1 7ec3658d4232428c0e12dfab82b71a4f7d0f0427
- SHA512 774437040673dd49782e7893b4784e4d406f8c4dd57f52c8c21791fe45b618170287e69f52862730da0e9cd38998d55d586d29a918690acff21adf9cb4d5025b
- SSDEEP 6144:KwgDUqAcsDk3lRJNmOMl394NOw2C2wk1k:SDUqdsDk1RJ7WUek
- TLSH T1B1146A14B6E2C032E5B3063429F4DBB69A7EB9710F70A9DF6784173E09306D19A34B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.