General
- Target 2026-10-22_28d93804200e305cf5a231fd894917f4_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 244KB
- Sample261024-w4jayabw5t
- SHA256 86bd40b7a7f8d403ea64fcf51b5541d3b0bc54b7b7b6c6d924c545ea5326386f
- MD5 28d93804200e305cf5a231fd894917f4
- SHA1 288a0412a59409a9d41887311d262a32d346e56a
- SHA512 15b0879570660df1dc77ccf679dc53df168df44f283f44f3004d867785ec1dbebbf0f20cb802f8b979834578c984e686a8f3eb788899b31e6e9fcbde8c37e4fd
- SSDEEP 6144:WVfjmN9qml5a6EdkQxiUmRQColKGAOPQK2GwIgfx+qSfF0:47+Uml5a6EdkQgUmR7G9QK3wJx+qSfF0
- TLSH T1F2349E12B5E180B3E9B30D3449F4AE759ABDB9310B258A7F63D84F6D1F30681921A773
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_28d93804200e305cf5a231fd894917f4_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_28d93804200e305cf5a231fd894917f4_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 244KB
- SHA256 86bd40b7a7f8d403ea64fcf51b5541d3b0bc54b7b7b6c6d924c545ea5326386f
- MD5 28d93804200e305cf5a231fd894917f4
- SHA1 288a0412a59409a9d41887311d262a32d346e56a
- SHA512 15b0879570660df1dc77ccf679dc53df168df44f283f44f3004d867785ec1dbebbf0f20cb802f8b979834578c984e686a8f3eb788899b31e6e9fcbde8c37e4fd
- SSDEEP 6144:WVfjmN9qml5a6EdkQxiUmRQColKGAOPQK2GwIgfx+qSfF0:47+Uml5a6EdkQgUmR7G9QK3wJx+qSfF0
- TLSH T1F2349E12B5E180B3E9B30D3449F4AE759ABDB9310B258A7F63D84F6D1F30681921A773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.