General
- Target 2026-11-03_a0041724d4503026e15fe8d59923344f_amadey_cobalt-strike_darkgate_elex_glassworm_luca-stealer_lynx_njrat
- Size 833KB
- Sample261104-pfz58act3j
- SHA256 5ea69952304da6492da0fb7a80dc9ab0d4854339179abb1d4625585ed561b8b5
- MD5 a0041724d4503026e15fe8d59923344f
- SHA1 25421c1ae594ee12931161680ae5ab9d8fd3954a
- SHA512 1e40b998740d828a10c7acd99eb9498a0d4be716b3a3e3baef7ba68304c03c7b74c7b8836026905c6efaa1289ae7ea33fa4feb46eb6c83878e6cf1eee4e9799b
- SSDEEP 12288:2BhA3SfDkVs+k3mI62ATai/QqzlFCl7yZVrLnJtZsbTTeIhcUweLYMHRY:AiifDk0/AT71Cl7UpsX2Uworx
- TLSH T169059E02B6D18471F192017A0A3BF77E6E3DB1105B25C9C7C3E4D99899622E1EA3F35E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-03_a0041724d4503026e15fe8d59923344f_amadey_cobalt-strike_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_a0041724d4503026e15fe8d59923344f_amadey_cobalt-strike_darkgate_elex_glassworm_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
metasploit_stager
C2
-
192.168.135.128:4444
Targets
-
- Target 2026-11-03_a0041724d4503026e15fe8d59923344f_amadey_cobalt-strike_darkgate_elex_glassworm_luca-stealer_lynx_njrat
- Size 833KB
- SHA256 5ea69952304da6492da0fb7a80dc9ab0d4854339179abb1d4625585ed561b8b5
- MD5 a0041724d4503026e15fe8d59923344f
- SHA1 25421c1ae594ee12931161680ae5ab9d8fd3954a
- SHA512 1e40b998740d828a10c7acd99eb9498a0d4be716b3a3e3baef7ba68304c03c7b74c7b8836026905c6efaa1289ae7ea33fa4feb46eb6c83878e6cf1eee4e9799b
- SSDEEP 12288:2BhA3SfDkVs+k3mI62ATai/QqzlFCl7yZVrLnJtZsbTTeIhcUweLYMHRY:AiifDk0/AT71Cl7UpsX2Uworx
- TLSH T169059E02B6D18471F192017A0A3BF77E6E3DB1105B25C9C7C3E4D99899622E1EA3F35E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.