2026-10-13_2d18a7ec31f825a2da24053d691188dc_cobalt-strike_elex_luca-stealer_njrat_play

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-13_2d18a7ec31f825a2da24053d691188dc_cobalt-strike_elex_luca-stealer_njrat_play
Size 365KB
Sample261015-vkd2faax7j
SHA256 161db22bf39e29443072fd9faedff66125e469927e1ba1cee382390d5cfc124c
MD5 2d18a7ec31f825a2da24053d691188dc
SHA1 d0b52c37c6628008a4c48c882047851cfb2147ba
SHA512 612793d39137b5b878f2d5b92ef7c8375591135d2e859805a941a58711005f7c2d9a59d2c910d6c7099ecc197fcce4eea38d11b3bbc19abf340bf843774e19fa
SSDEEP 6144:Ye5YNz3yc0lVPNg4Uh3S+my3b9T7clvxGR50FtR3aB9JmepcsNmUBx15HAObuwqY:Y/Nz3yc0aS7U9clvxVcTc4pZMM/
TLSH
T17684BF01F8E3E033D56554701C6AEFBBC53968660F5098EB7BD02EEA4C606D16B36B27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-13_2d18a7ec31f825a2da24053d691188dc_cobalt-strike_elex_luca-stealer_njrat_play

File Explorer

2026-10-13_2d18a7ec31f825a2da24053d691188dc_cobalt-strike_elex_luca-stealer_njrat_play

.exe 365KB

2026-10-13_2d18a7ec31f825a2da24053d691188dc_cobalt-strike_elex_luca-stealer_njrat_play

IMPHASH 16967bda3c960adba45185d8f230c601
SHA256 161db22bf39e29443072fd9faedff66125e469927e1ba1cee382390d5cfc124c
MD5 2d18a7ec31f825a2da24053d691188dc
SHA1 d0b52c37c6628008a4c48c882047851cfb2147ba
SHA512 612793d39137b5b878f2d5b92ef7c8375591135d2e859805a941a58711005f7c2d9a59d2c910d6c7099ecc197fcce4eea38d11b3bbc19abf340bf843774e19fa
SSDEEP 6144:Ye5YNz3yc0lVPNg4Uh3S+my3b9T7clvxGR50FtR3aB9JmepcsNmUBx15HAObuwqY:Y/Nz3yc0aS7U9clvxVcTc4pZMM/
TLSH
T17684BF01F8E3E033D56554701C6AEFBBC53968660F5098EB7BD02EEA4C606D16B36B27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

76128

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

GetParent SetWindowLongW GetMessageW PtInRect ScreenToClient GetCursorPos MessageBoxW GetClientRect GetWindowTextW SetWindowTextW SetWindowsHookExW UnhookWindowsHookEx CallNextHookEx LoadCursorW LoadIconW InvalidateRect EndPaint BeginPaint ReleaseDC GetDC SetForegroundWindow UpdateWindow DestroyIcon AppendMenuW DestroyMenu CreatePopupMenu GetSystemMetrics KillTimer SetTimer ReleaseCapture SetCapture MapVirtualKeyW EnumDisplayDevicesW GetKeyNameTextW GetFocus SetFocus EmptyClipboard SetClipboardData CloseClipboard OpenClipboard IsWindowVisible ShowWindow DestroyWindow CreateWindowExW RegisterClassW CallWindowProcW PostQuitMessage DefWindowProcW PostMessageW SendMessageW DispatchMessageW TranslateMessage TrackPopupMenu

gdi32

DeleteObject CreateFontW CreateDCW GetStockObject SetBkColor SetTextColor CreateSolidBrush DeleteDC SetDeviceGammaRamp

shell32

Shell_NotifyIconW

advapi32

RegQueryValueExW RegOpenKeyExW RegDeleteValueW RegCreateKeyExW RegCloseKey RegSetValueExW

gdiplus

GdipDeleteGraphics GdipAlloc GdipSetStringFormatLineAlign GdipSetStringFormatAlign GdipDeleteStringFormat GdipCreateStringFormat GdipDrawString GdipDeleteFont GdipDeleteFontFamily GdipCreateFontFamilyFromName GdipDrawImageRect GdipDrawImageI GdipFillPath GdipFillEllipseI GdipFillEllipse GdipFillRectangleI GdipDrawPath GdipDrawEllipseI GdipDrawEllipse GdipDrawArc GdipDrawLineI GdipSetTextRenderingHint GdipSetSmoothingMode GdipCreateFont GdipCreateFromHDC GdipCreateBitmapFromScan0 GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdipLoadImageFromStream GdipSetPenEndCap GdipSetPenStartCap GdipDeletePen GdipCreatePen2 GdipCreatePen1 GdipGetPathGradientPointCount GdipSetPathGradientSurroundColorsWithCount GdipSetPathGradientCenterColor GdipCreatePathGradientFromPath GdipCreateLineBrushFromRect GdipCreateLineBrushI GdipCreateSolidFill GdipDeleteBrush GdipCloneBrush GdipAddPathEllipse GdipAddPathArc GdipClosePathFigure GdipDeletePath GdipCreatePath GdiplusShutdown GdiplusStartup GdipFree

magnification

MagUninitialize MagSetFullscreenTransform MagInitialize MagSetFullscreenColorEffect

dwmapi

DwmSetWindowAttribute

comctl32

ord410 InitCommonControlsEx ord413 ord412

winhttp

WinHttpQueryDataAvailable WinHttpCloseHandle WinHttpReceiveResponse WinHttpSendRequest WinHttpOpenRequest WinHttpConnect WinHttpReadData WinHttpOpen

ole32

CreateStreamOnHGlobal

kernel32

GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree RtlUnwind RaiseException GetCommandLineW CloseHandle CreateThread GetTickCount SetUnhandledExceptionFilter LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetProcAddress GetStdHandle WriteFile IsDebuggerPresent UnhandledExceptionFilter HeapFree HeapAlloc CreateFileW GetModuleFileNameW GetModuleHandleW GlobalAlloc GlobalUnlock GlobalLock GlobalFree MultiByteToWideChar WideCharToMultiByte EncodePointer IsProcessorFeaturePresent GetFileType DecodePointer GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime EnterCriticalSection WriteConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize SetFilePointerEx GetStringTypeW SetStdHandle GetProcessHeap LCMapStringW LoadLibraryExW VirtualProtect FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose InitializeSListHead

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-13_2d18a7ec31f825a2da24053d691188dc_cobalt-strike_elex_luca-stealer_njrat_play

user32

gdi32

shell32

advapi32

gdiplus

magnification

dwmapi

comctl32

winhttp

ole32

kernel32

generic