2026-10-25_b758843a63761b70253a9633e45b07eb_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-25_b758843a63761b70253a9633e45b07eb_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader
Size 286KB
Sample261026-sbjt8aex2w
SHA256 cccf6a9e1b3137cfb220bc18588febe032e4a4891511e037684b1c6bf82b9524
MD5 b758843a63761b70253a9633e45b07eb
SHA1 c48209abda1e8c4003bb561f1c15018c94d53db4
SHA512 edafeb6a1d345527680dbe7b0c77be78829e660c8f971aab3372f7ae8cdb650cd8f78bf8164a1a6958ea0570d900704a28f36de015c9ad2bb1c40ae5f0cb11cc
SSDEEP 6144:Ks8ZdT9q7nGJUeCCeHHQTR9Vwif/ZBT8p3UekAUntXoAOmUEGC:GV3UjCeHHQTrVTf/ZBIpKtXoU
TLSH
T16B548C10B683C432D5B215361A38D766497EBE310F259AEBA3D44E7ECE301C1AA35F67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-25_b758843a63761b70253a9633e45b07eb_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader

File Explorer

2026-10-25_b758843a63761b70253a9633e45b07eb_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader

.exe 286KB

2026-10-25_b758843a63761b70253a9633e45b07eb_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader

IMPHASH 0a0ea12e53a79921904d5d42b22b9c75
SHA256 cccf6a9e1b3137cfb220bc18588febe032e4a4891511e037684b1c6bf82b9524
MD5 b758843a63761b70253a9633e45b07eb
SHA1 c48209abda1e8c4003bb561f1c15018c94d53db4
SHA512 edafeb6a1d345527680dbe7b0c77be78829e660c8f971aab3372f7ae8cdb650cd8f78bf8164a1a6958ea0570d900704a28f36de015c9ad2bb1c40ae5f0cb11cc
SSDEEP 6144:Ks8ZdT9q7nGJUeCCeHHQTR9Vwif/ZBT8p3UekAUntXoAOmUEGC:GV3UjCeHHQTrVTf/ZBIpKtXoU
TLSH
T16B548C10B683C432D5B215361A38D766497EBE310F259AEBA3D44E7ECE301C1AA35F67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

62104

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Administrator\source\repos\u_info\Release\u_info.pdb

kernel32

GetProcessHeap HeapSize InitializeCriticalSectionEx DeleteCriticalSection WideCharToMultiByte IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection InterlockedCompareExchange Sleep InitializeCriticalSection InitializeCriticalSectionAndSpinCount FreeResource LockResource FreeLibrary GetProcAddress GetCurrentProcess LoadResource SizeofResource CloseHandle LoadLibraryExW GetModuleHandleW FindResourceW FindResourceExW GetSystemWindowsDirectoryW GetVersionExW MultiByteToWideChar DeviceIoControl lstrcmpA CreateFileW lstrcmpiA LoadLibraryW GetSystemDirectoryW CreateFileA EncodePointer SetLastError CreateEventW SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime CompareStringW LCMapStringW HeapFree GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwind ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW WaitForSingleObject GetExitCodeProcess CreateProcessW GetFileAttributesExW GetFileType IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle WriteConsoleW HeapReAlloc HeapAlloc HeapDestroy GetLastError RaiseException GetLocaleInfoW DecodePointer

version

VerQueryValueW

iphlpapi

GetAdaptersInfo

advapi32

RegQueryValueExW RegCreateKeyExW RegCloseKey GetTokenInformation OpenProcessToken RegSetValueExW RegOpenKeyExW RegEnumKeyExW RegEnumKeyExA RegOpenKeyExA RegQueryValueExA

ole32

CoCreateGuid

shlwapi

StrStrIA StrTrimA StrCmpNIW StrStrIW StrCmpIW SHGetValueA SHSetValueA PathCombineW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-25_b758843a63761b70253a9633e45b07eb_amadey_cobalt-strike_elex_luca-stealer_lynx_njrat_smoke-loader

kernel32

version

iphlpapi

advapi32

ole32

shlwapi

generic