General
- Target 2026-04-15_b8aa078aa75639037bbe107f7602a8a0_amadey_cobalt-strike_darkgate_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_vidar_wannacry
- Size 8.3MB
- Sample260415-c67lrshs2w
- SHA256 29826cf286e51c610a8300e38c289f6d31d1a3bfe637039238c652470f813d96
- MD5 b8aa078aa75639037bbe107f7602a8a0
- SHA1 00a8e4f100befa0048b5711ba2e85fb13c22bad5
- SHA512 5366e408a9ec8f3dfe9f20ed824a4489a6d276608411b30baade2ad02dc7471dc1c8d4b4c9e3b92866448de25ede06c8adf43a89460afb16f71034258750ad32
- SSDEEP 196608:2OVKWQc0gEYnvLJEdPEKOVKWQc0gEYnvLJEdPE4/jR:2hcZEIv9EdBhcZEIv9EdpR
- TLSH T190967CD27E50B071D0A148357A1696BD97677C20CA138E8B2283FFEDFBF62905936631
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_b8aa078aa75639037bbe107f7602a8a0_amadey_cobalt-strike_darkgate_hellokitty_hijackloader_ic.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_b8aa078aa75639037bbe107f7602a8a0_amadey_cobalt-strike_darkgate_hellokitty_hijackloader_ic.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_b8aa078aa75639037bbe107f7602a8a0_amadey_cobalt-strike_darkgate_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_vidar_wannacry
- Size 8.3MB
- SHA256 29826cf286e51c610a8300e38c289f6d31d1a3bfe637039238c652470f813d96
- MD5 b8aa078aa75639037bbe107f7602a8a0
- SHA1 00a8e4f100befa0048b5711ba2e85fb13c22bad5
- SHA512 5366e408a9ec8f3dfe9f20ed824a4489a6d276608411b30baade2ad02dc7471dc1c8d4b4c9e3b92866448de25ede06c8adf43a89460afb16f71034258750ad32
- SSDEEP 196608:2OVKWQc0gEYnvLJEdPEKOVKWQc0gEYnvLJEdPE4/jR:2hcZEIv9EdBhcZEIv9EdpR
- TLSH T190967CD27E50B071D0A148357A1696BD97677C20CA138E8B2283FFEDFBF62905936631
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.