2026-10-10_4073f2c5e08d07dff3124b3e8f70208e_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat

General

Target
2026-10-10_4073f2c5e08d07dff3124b3e8f70208e_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat
Size 337KB
Sample261011-tltb3sch69
SHA256 77fd1c5b4aa0fb89dc83168016c042a16f605ccef1bda0247461825a7fc0423b
MD5 4073f2c5e08d07dff3124b3e8f70208e
SHA1 9f91f8374c90324c3e04fd2ae6606d5456878629
SHA512 e27edcb235409c3aa8e0d1a6cf25b4ddb2cb9985e1dc4d264bae4e437afc1a0c02486405919ef3fd498667ddb20091c25c1b7f6d1933c7a427643ea0be22eaae
SSDEEP 6144:+/7UMZownLL8vjCHducFnDq8zOgyVrB7qTSxg3pHTJ8cEmZ7o:36znefcFnD5IOSxUpzRZ7o
TLSH
T168745A12B6808871C47212BA05E4EBB5573EAD604BB589CB67E47F3FFB702C25E31916
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-10_4073f2c5e08d07dff3124b3e8f70208e_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat

File Explorer

2026-10-10_4073f2c5e08d07dff3124b3e8f70208e_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat

.exe 337KB

2026-10-10_4073f2c5e08d07dff3124b3e8f70208e_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat

IMPHASH 953ddbeaf8260a562016edb32b006967
SHA256 77fd1c5b4aa0fb89dc83168016c042a16f605ccef1bda0247461825a7fc0423b
MD5 4073f2c5e08d07dff3124b3e8f70208e
SHA1 9f91f8374c90324c3e04fd2ae6606d5456878629
SHA512 e27edcb235409c3aa8e0d1a6cf25b4ddb2cb9985e1dc4d264bae4e437afc1a0c02486405919ef3fd498667ddb20091c25c1b7f6d1933c7a427643ea0be22eaae
SSDEEP 6144:+/7UMZownLL8vjCHducFnDq8zOgyVrB7qTSxg3pHTJ8cEmZ7o:36znefcFnD5IOSxUpzRZ7o
TLSH
T168745A12B6808871C47212BA05E4EBB5573EAD604BB589CB67E47F3FFB702C25E31916
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

58037

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MultiByteToWideChar LoadLibraryExA CreateFileW CloseHandle WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapAlloc HeapFree GetFileType HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle SetFilePointerEx HeapSize FlushFileBuffers GetConsoleOutputCP GetConsoleMode WriteConsoleW

version

VerQueryValueW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-10_4073f2c5e08d07dff3124b3e8f70208e_amadey_cobalt-strike_elex_luca-stealer_lynx_metamorfo_njrat

kernel32

version

generic