General
- Target 2026-04-15_a8d20aaaa3b9491440cbc828ad0ebc10_amadey_cobalt-strike_coinminer_hellokitty_hijackloader_icedid_luca-stealer_njrat_satacom_smoke-loader_stealc_vidar
- Size 6.6MB
- Sample260415-ffth1aez7q
- SHA256 8983257360d37a9d55a821451b98cb7e2a6199c2e0d559ebe17782fdf9893a6e
- MD5 a8d20aaaa3b9491440cbc828ad0ebc10
- SHA1 14a8d5bd0644da7376638ec3e5adbbd4c9bda230
- SHA512 8bd6fcee928f77bee18f3625ca1986dd01a68a955efd72aef2f2f2c4e9e07f22704749c3d6385bec90c46bad3e5385d6641a58c26b8a811f820fbdaf1f168249
- SSDEEP 98304:3n7OizOn7Oiz+1/tr37wsWKjKWQckVgtev5mnlNL:3nSizOnSizeB7KWQc0gEYnvL
- TLSH T1BE66BE0667B880E4C16AC17989239912F6B27C4D4730E6DF07A09A7B1F777E1AE3DB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-15_a8d20aaaa3b9491440cbc828ad0ebc10_amadey_cobalt-strike_coinminer_hellokitty_hijackloader_i.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_a8d20aaaa3b9491440cbc828ad0ebc10_amadey_cobalt-strike_coinminer_hellokitty_hijackloader_i.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_a8d20aaaa3b9491440cbc828ad0ebc10_amadey_cobalt-strike_coinminer_hellokitty_hijackloader_icedid_luca-stealer_njrat_satacom_smoke-loader_stealc_vidar
- Size 6.6MB
- SHA256 8983257360d37a9d55a821451b98cb7e2a6199c2e0d559ebe17782fdf9893a6e
- MD5 a8d20aaaa3b9491440cbc828ad0ebc10
- SHA1 14a8d5bd0644da7376638ec3e5adbbd4c9bda230
- SHA512 8bd6fcee928f77bee18f3625ca1986dd01a68a955efd72aef2f2f2c4e9e07f22704749c3d6385bec90c46bad3e5385d6641a58c26b8a811f820fbdaf1f168249
- SSDEEP 98304:3n7OizOn7Oiz+1/tr37wsWKjKWQckVgtev5mnlNL:3nSizOnSizeB7KWQc0gEYnvL
- TLSH T1BE66BE0667B880E4C16AC17989239912F6B27C4D4730E6DF07A09A7B1F777E1AE3DB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.