General
- Target 2026-10-22_c0d2d6f4a3a60a9e9f030f75257b52e7_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 302KB
- Sample261023-1sjjsa1sav
- SHA256 34a427a832ec4df7433219a339fa0305c81b6e09443f564ac794f166c98e0862
- MD5 c0d2d6f4a3a60a9e9f030f75257b52e7
- SHA1 9dfdf8f65be738687a91e8dd270cf901f43f1e56
- SHA512 759301bce25adabf2a59a47f820b9de6899fc88cfce16785acd0d14f092c9119738d08f0cda03b72c2f0a2d2c4574810a762a9fbf996e31661290d6732ecf7fb
- SSDEEP 6144:i6w8XCs7zYA9xiNFiVg7s/uDoeBvhI79StR7b:icXCs/YAh/elvhI79WRX
- TLSH T16D64C0A1F480C4B2C866243305F5DB711A3EBC7419E1894F63997A395F733D2922A9EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_c0d2d6f4a3a60a9e9f030f75257b52e7_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_c0d2d6f4a3a60a9e9f030f75257b52e7_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 302KB
- SHA256 34a427a832ec4df7433219a339fa0305c81b6e09443f564ac794f166c98e0862
- MD5 c0d2d6f4a3a60a9e9f030f75257b52e7
- SHA1 9dfdf8f65be738687a91e8dd270cf901f43f1e56
- SHA512 759301bce25adabf2a59a47f820b9de6899fc88cfce16785acd0d14f092c9119738d08f0cda03b72c2f0a2d2c4574810a762a9fbf996e31661290d6732ecf7fb
- SSDEEP 6144:i6w8XCs7zYA9xiNFiVg7s/uDoeBvhI79StR7b:icXCs/YAh/elvhI79WRX
- TLSH T16D64C0A1F480C4B2C866243305F5DB711A3EBC7419E1894F63997A395F733D2922A9EF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.