General
- Target 2026-10-14_0d6cbfb562a25cff02bcd7b56ba64520_amadey_cobalt-strike_elex_icedid_luca-stealer_lynx_njrat_stealc
- Size 640KB
- Sample261015-ect5pavs5r
- SHA256 30859399bbdd001bb009f6644062bbb0b1c45a9375df43fc96351d239389d0db
- MD5 0d6cbfb562a25cff02bcd7b56ba64520
- SHA1 5c23964f4946e224ab1913cba0726a94ebec0f57
- SHA512 0e6294ece25693fea6b4612c5654d71a79a0c7d94cb871c890ac2b688b54eedb4d33634235c7323a4db56c526e8b81b27b5412729c17c7c00c887f4fac09098e
- SSDEEP 12288:qeEcWN9hWQ/vNJR/0x639fWcMeY6ReOSoEpy8ATB:qeEcQhWQ3Rb1WcM01t
- TLSH T1E4D49E02B640D4B6E07709748D74AB259BFEBC700BA157CB73C01AAA5E716C0EF26B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-14_0d6cbfb562a25cff02bcd7b56ba64520_amadey_cobalt-strike_elex_icedid_luca-stealer_lynx_njrat_stealc.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-14_0d6cbfb562a25cff02bcd7b56ba64520_amadey_cobalt-strike_elex_icedid_luca-stealer_lynx_njrat_stealc.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
LogsDillerCloud
C2
-
http://trainisshit.shop
Attributes
-
url_path
/19b574f278f94a33.php
rc4.traffic_key
rc4.C2
Targets
-
- Target 2026-10-14_0d6cbfb562a25cff02bcd7b56ba64520_amadey_cobalt-strike_elex_icedid_luca-stealer_lynx_njrat_stealc
- Size 640KB
- SHA256 30859399bbdd001bb009f6644062bbb0b1c45a9375df43fc96351d239389d0db
- MD5 0d6cbfb562a25cff02bcd7b56ba64520
- SHA1 5c23964f4946e224ab1913cba0726a94ebec0f57
- SHA512 0e6294ece25693fea6b4612c5654d71a79a0c7d94cb871c890ac2b688b54eedb4d33634235c7323a4db56c526e8b81b27b5412729c17c7c00c887f4fac09098e
- SSDEEP 12288:qeEcWN9hWQ/vNJR/0x639fWcMeY6ReOSoEpy8ATB:qeEcQhWQ3Rb1WcM01t
- TLSH T1E4D49E02B640D4B6E07709748D74AB259BFEBC700BA157CB73C01AAA5E716C0EF26B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10