2026-10-23_aae36e8affadf74cadb8002eef9c0f96_amadey_cobalt-strike_elex_luca-stealer_njrat_play

General

Target
2026-10-23_aae36e8affadf74cadb8002eef9c0f96_amadey_cobalt-strike_elex_luca-stealer_njrat_play
Size 121KB
Sample261023-kn35maxsh1
SHA256 3d53eb4d61fb12d194ad07f30aaa91a9f04a4126b705172a77f92c152a5837ad
MD5 aae36e8affadf74cadb8002eef9c0f96
SHA1 45332ed0304a677559fc71461ba4bbb98311a407
SHA512 098fe0941b445f6996607749a31fff62f4f2acbadaf941d2485cbf73bdac1d8b28eef4dd8030fef311ad83c98ec2d0f06f69e7f441755e927d41c97e4bd82f86
SSDEEP 3072:hCKDQNvX6aQ8/HrNP29oCiThbiCE2vcG3apbjrgfRfuDwc:hJASXAHpO9H7G3O
TLSH
T1AEC36C11B8D1D433D6651C309861CE619E2EFCB04FA0ADDBB7880DBA4E306D19B39B67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-23_aae36e8affadf74cadb8002eef9c0f96_amadey_cobalt-strike_elex_luca-stealer_njrat_play

File Explorer

2026-10-23_aae36e8affadf74cadb8002eef9c0f96_amadey_cobalt-strike_elex_luca-stealer_njrat_play

.exe 121KB

2026-10-23_aae36e8affadf74cadb8002eef9c0f96_amadey_cobalt-strike_elex_luca-stealer_njrat_play

IMPHASH 665a76778eea44001eda270821afeb9f
SHA256 3d53eb4d61fb12d194ad07f30aaa91a9f04a4126b705172a77f92c152a5837ad
MD5 aae36e8affadf74cadb8002eef9c0f96
SHA1 45332ed0304a677559fc71461ba4bbb98311a407
SHA512 098fe0941b445f6996607749a31fff62f4f2acbadaf941d2485cbf73bdac1d8b28eef4dd8030fef311ad83c98ec2d0f06f69e7f441755e927d41c97e4bd82f86
SSDEEP 3072:hCKDQNvX6aQ8/HrNP29oCiThbiCE2vcG3apbjrgfRfuDwc:hJASXAHpO9H7G3O
TLSH
T1AEC36C11B8D1D433D6651C309861CE619E2EFCB04FA0ADDBB7880DBA4E306D19B39B67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

11575

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

TranslateMessage LoadCursorW GetWindowTextLengthW GetWindowTextW SetWindowTextW UpdateWindow ShowWindow CreateWindowExW RegisterClassW PostQuitMessage DefWindowProcW SendMessageW DispatchMessageW GetMessageW

comdlg32

GetOpenFileNameW

kernel32

DecodePointer GetConsoleMode GetConsoleOutputCP FlushFileBuffers CreateFileW HeapSize SetFilePointerEx GetProcessHeap LCMapStringW HeapReAlloc LeaveCriticalSection CloseHandle GetLastError WaitForSingleObject TerminateProcess CreateThread CreateRemoteThread GetExitCodeThread ResumeThread CreateProcessW OpenProcess VirtualAllocEx WriteProcessMemory VirtualFreeEx GetModuleFileNameW GetModuleHandleW GetProcAddress CreateToolhelp32Snapshot Process32FirstW Process32NextW IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwind SetLastError EncodePointer EnterCriticalSection WriteConsoleW DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile ExitProcess GetModuleHandleExW HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-23_aae36e8affadf74cadb8002eef9c0f96_amadey_cobalt-strike_elex_luca-stealer_njrat_play

user32

comdlg32

kernel32

generic