General
- Target 2026-09-30_3f35514a67a9aaa8993ee41e1d01e4b0_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 735KB
- Sample260930-par8estwh1
- SHA256 55d67873ea80711c49d0b200db40bd37b59ee7d08ebdd4c1ac15912dc9dd5209
- MD5 3f35514a67a9aaa8993ee41e1d01e4b0
- SHA1 d34518616298b37a231b01fc37d249582b4e4a0e
- SHA512 1da0683c55680bf9b28d1e4c9cec6544ec28e88fbe0f476c3c9b356ec81cccf88b2d505fb5c93377d148fd8c2e187eda6aebc217e595bcd449317a62f2d1d7da
- SSDEEP 12288:cEWCEGaAca9QMo7rv/E4GV3TV31utHC1v0XHEjCwiC:cIaE9QMo3EzuuvSHEjC8
- TLSH T157F4172225D9BCB6E4B202716B7F97E5871DEC200765C4CF63C4451A4A7C9E33E32BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_3f35514a67a9aaa8993ee41e1d01e4b0_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_3f35514a67a9aaa8993ee41e1d01e4b0_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 735KB
- SHA256 55d67873ea80711c49d0b200db40bd37b59ee7d08ebdd4c1ac15912dc9dd5209
- MD5 3f35514a67a9aaa8993ee41e1d01e4b0
- SHA1 d34518616298b37a231b01fc37d249582b4e4a0e
- SHA512 1da0683c55680bf9b28d1e4c9cec6544ec28e88fbe0f476c3c9b356ec81cccf88b2d505fb5c93377d148fd8c2e187eda6aebc217e595bcd449317a62f2d1d7da
- SSDEEP 12288:cEWCEGaAca9QMo7rv/E4GV3TV31utHC1v0XHEjCwiC:cIaE9QMo3EzuuvSHEjC8
- TLSH T157F4172225D9BCB6E4B202716B7F97E5871DEC200765C4CF63C4451A4A7C9E33E32BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.