General
- Target 2026-04-17_8e9a5491c0ca699c490b8048310f5225_amadey_cobalt-strike_elex_emotet_hellokitty_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
- Size 405KB
- Sample260417-b7rfhadv9p
- SHA256 db9feb1875716afaddbc034729342caf8cd03d00b638031abefef51665e21d74
- MD5 8e9a5491c0ca699c490b8048310f5225
- SHA1 6a7934a4ea3ba7af4fdfcb62c1bffa5d9f02d578
- SHA512 2a1f8f46adc00e32d39cae64d80c73c6f477882e6d6b4d6a985f5bb8ed659e72dc13fe721b62962ffabeaadabb0410a31bccafaf04abdfbf5a88effc8189db62
- SSDEEP 12288:GaoVql+84Y0ImGUcsvZZdubv7u2l35iuWXC:GDVqlzYxGBcslpiuWXC
- TLSH T1C3947B1136D08EB2E5AF043049B19A719A7BFD301F219BCB63947F593E306C19A3A767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-17_8e9a5491c0ca699c490b8048310f5225_amadey_cobalt-strike_elex_emotet_hellokitty_hijackloader.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_8e9a5491c0ca699c490b8048310f5225_amadey_cobalt-strike_elex_emotet_hellokitty_hijackloader.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_8e9a5491c0ca699c490b8048310f5225_amadey_cobalt-strike_elex_emotet_hellokitty_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
- Size 405KB
- SHA256 db9feb1875716afaddbc034729342caf8cd03d00b638031abefef51665e21d74
- MD5 8e9a5491c0ca699c490b8048310f5225
- SHA1 6a7934a4ea3ba7af4fdfcb62c1bffa5d9f02d578
- SHA512 2a1f8f46adc00e32d39cae64d80c73c6f477882e6d6b4d6a985f5bb8ed659e72dc13fe721b62962ffabeaadabb0410a31bccafaf04abdfbf5a88effc8189db62
- SSDEEP 12288:GaoVql+84Y0ImGUcsvZZdubv7u2l35iuWXC:GDVqlzYxGBcslpiuWXC
- TLSH T1C3947B1136D08EB2E5AF043049B19A719A7BFD301F219BCB63947F593E306C19A3A767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory