General

  • Target
    2026-10-26_8a804dc83c9c0e808f82f22cdf2b593c_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
  • Size 246KB
  • Sample261027-pl8dsa1w7q
  • SHA256 c8ec33a2092c1a997b1a0a4324cc4f93ad50e0e4bb16ed51c448a8f9f5ad3c41
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-10-26_8a804dc83c9c0e808f82f22cdf2b593c_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
    • Size 246KB
    • SHA256 c8ec33a2092c1a997b1a0a4324cc4f93ad50e0e4bb16ed51c448a8f9f5ad3c41
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks