General
- Target 2026-10-28_53696ad0de30379c1fc6f65b7e7d14b3_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 300KB
- Sample261030-e6am5shs5x
- SHA256 773718382f3e46a3b80c0d74dc0ca2b1858c7fc2d5633027b85dc764123c7293
- MD5 53696ad0de30379c1fc6f65b7e7d14b3
- SHA1 2e9105b13b8beff216b05a5aad95de93c8727d9a
- SHA512 3ba7310d3a93c1590fccd56df7fd099c57b97013ce6e334ae346943cfa9be8f4dce11007d38218dc5d4f66fd2d0cb888d39b08ed9eeeb857bc77e94fd08b1c76
- SSDEEP 6144:i6wZXCs7zYA9xiNFiVg7s/uDoeBvhI77+iYhG9+N9:i5XCs/YAh/elvhI77HY+Y9
- TLSH T16B64C0A1B480D4B2C472243305E5DB711A3EBC7459E1894FA3A97B3A9F333D152269EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-28_53696ad0de30379c1fc6f65b7e7d14b3_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_53696ad0de30379c1fc6f65b7e7d14b3_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader
- Size 300KB
- SHA256 773718382f3e46a3b80c0d74dc0ca2b1858c7fc2d5633027b85dc764123c7293
- MD5 53696ad0de30379c1fc6f65b7e7d14b3
- SHA1 2e9105b13b8beff216b05a5aad95de93c8727d9a
- SHA512 3ba7310d3a93c1590fccd56df7fd099c57b97013ce6e334ae346943cfa9be8f4dce11007d38218dc5d4f66fd2d0cb888d39b08ed9eeeb857bc77e94fd08b1c76
- SSDEEP 6144:i6wZXCs7zYA9xiNFiVg7s/uDoeBvhI77+iYhG9+N9:i5XCs/YAh/elvhI77HY+Y9
- TLSH T16B64C0A1B480D4B2C472243305E5DB711A3EBC7459E1894FA3A97B3A9F333D152269EF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.