2026-10-19_63ae05a86fb7ee79726c12b27d37fb0c_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-19_63ae05a86fb7ee79726c12b27d37fb0c_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
Size 314KB
Sample261020-w6caeavy6p
SHA256 02344a536cb502fc220353eba4f33513a5e3a2a9dfd880cd70a8674796f0ed7a
MD5 63ae05a86fb7ee79726c12b27d37fb0c
SHA1 a58cd95dac9d64d96566b2131111a704dd5ddb6d
SHA512 ba27d1afeda653fd012018bd880708ef6a9f0a3ff344119c4ae7a525df9f436fd4017b18b499ac6eae901fea96d37c19a5410c1847552b09d0c288a49affbc47
SSDEEP 6144:BrrzCGMcC9iKm/DmOUaPxvR290qMbclqsUg+hSIY3eFw:pjMcC9iKm/Dm/aPx50isXWG
TLSH
T1C8648E01B542B03AF9A704778BBE9B6D8A3CA8910B1465CB93C41DFA5E219D1FB3171F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-19_63ae05a86fb7ee79726c12b27d37fb0c_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader

File Explorer

2026-10-19_63ae05a86fb7ee79726c12b27d37fb0c_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader

.exe 314KB

2026-10-19_63ae05a86fb7ee79726c12b27d37fb0c_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader

IMPHASH f6d0ee98552d9bee5bd95cc831e46f43
SHA256 02344a536cb502fc220353eba4f33513a5e3a2a9dfd880cd70a8674796f0ed7a
MD5 63ae05a86fb7ee79726c12b27d37fb0c
SHA1 a58cd95dac9d64d96566b2131111a704dd5ddb6d
SHA512 ba27d1afeda653fd012018bd880708ef6a9f0a3ff344119c4ae7a525df9f436fd4017b18b499ac6eae901fea96d37c19a5410c1847552b09d0c288a49affbc47
SSDEEP 6144:BrrzCGMcC9iKm/DmOUaPxvR290qMbclqsUg+hSIY3eFw:pjMcC9iKm/Dm/aPx50isXWG
TLSH
T1C8648E01B542B03AF9A704778BBE9B6D8A3CA8910B1465CB93C41DFA5E219D1FB3171F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

103960

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d3d9

Direct3DCreate9

user32

RegisterWindowMessageW TranslateMessage DispatchMessageW PeekMessageW SendMessageW DefWindowProcW RegisterClassExW CreateWindowExW DestroyWindow GetDC ReleaseDC GetWindowRect ShowCursor

dbghelp

SymInitializeW SymLoadModuleExW SymEnumSymbols SymSetOptions SymCleanup SymGetOptions

gdiplus

GdipDisposeImage GdiplusStartup GdipCreateBitmapFromHBITMAP GdipSaveImageToFile

gdi32

SelectObject DeleteObject DeleteDC CreateCompatibleDC BitBlt CreateDIBSection

kernel32

GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc FreeEnvironmentStringsW SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW GetProcessHeap SetStdHandle HeapSize WriteConsoleW ReadConsoleW IsProcessorFeaturePresent SetEnvironmentVariableW CreateFileW DeleteFileW GetFileAttributesW ReadFile WriteFile GetTempPathW CloseHandle Sleep GetCurrentProcess GetCurrentProcessId GetTickCount64 GetModuleHandleW GetProcAddress LoadLibraryW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess SetEndOfFile IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead LCMapStringW RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect CompareStringW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-19_63ae05a86fb7ee79726c12b27d37fb0c_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader

d3d9

user32

dbghelp

gdiplus

gdi32

kernel32

generic