General

  • Target

    2025-07-04_1f77a723dae18f42a957ff5dc2a1d105_amadey_black-basta_cloudeye_cobalt-strike_elex_hellokitty_luca-stealer_rhada

  • Size

    724KB

  • Sample

    250704-vc7c1swvcw

  • MD5

    1f77a723dae18f42a957ff5dc2a1d105

  • SHA1

    e9c4ccdc58cc8b8b1f4f1238b56f7f83dec7ccd5

  • SHA256

    d2a0e0b1c4462024d7bf80d9659ae79b307785eca77bc8f3dbf6e959bffa5e92

  • SHA512

    6dc2460528512a8e3163ceb112bafba249f3600946f970dc7cce9494f7ac16d7b5950c97d63f9603b25d007d94ec8709041a45dda740d7f93c9218637b0cd593

  • SSDEEP

    12288:V18LjBTqKObM/lj1FBghDXZmdgF0RQU8osGFke0KO0fIQTzUjD5lE9h:Pw8KH/B1FBgDXZNFfZoWe0KVIQTach

Malware Config

Targets

    • Target

      2025-07-04_1f77a723dae18f42a957ff5dc2a1d105_amadey_black-basta_cloudeye_cobalt-strike_elex_hellokitty_luca-stealer_rhada

    • Size

      724KB

    • MD5

      1f77a723dae18f42a957ff5dc2a1d105

    • SHA1

      e9c4ccdc58cc8b8b1f4f1238b56f7f83dec7ccd5

    • SHA256

      d2a0e0b1c4462024d7bf80d9659ae79b307785eca77bc8f3dbf6e959bffa5e92

    • SHA512

      6dc2460528512a8e3163ceb112bafba249f3600946f970dc7cce9494f7ac16d7b5950c97d63f9603b25d007d94ec8709041a45dda740d7f93c9218637b0cd593

    • SSDEEP

      12288:V18LjBTqKObM/lj1FBghDXZmdgF0RQU8osGFke0KO0fIQTzUjD5lE9h:Pw8KH/B1FBgDXZNFfZoWe0KVIQTach

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks