General
- Target 2026-04-19_8c5b21d821857097fc61b00260548245_amadey_cobalt-strike_coinminer_darkgate_hellokitty_hijackloader_luca-stealer_njrat_remcos_satacom_smoke-loader
- Size 2.3MB
- Sample260419-3bjvbscv6j
- SHA256 371aa57db165e0c80deaf7a477983d871eaf8147baf8e28ed6c54595ab4feb22
- MD5 8c5b21d821857097fc61b00260548245
- SHA1 e55a9c47d119cace00275ac0979a5cc73ad9cc38
- SHA512 f9cab730b62b55103d45033d57c356b4be2fc9461b4012819ed21ee1739b62e0d6ff967af09066b1701b4f5fc79161c36e05e375b80614cb6757117f4b830e12
- SSDEEP 49152:hfU4UjrQUbiCZaoEKjKWQc2b1FVgbjrjxPe1pbPSQm1Flo+Lj:hfUbwU6KjKWQckVgtev5mnlNL
- TLSH T179B5F132A5E48036E6F10672BA249530BE7DFE341750886FA3D4BE1D2E78491AB77353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-19_8c5b21d821857097fc61b00260548245_amadey_cobalt-strike_coinminer_darkgate_hellokitty_hijac.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_8c5b21d821857097fc61b00260548245_amadey_cobalt-strike_coinminer_darkgate_hellokitty_hijac.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_8c5b21d821857097fc61b00260548245_amadey_cobalt-strike_coinminer_darkgate_hellokitty_hijackloader_luca-stealer_njrat_remcos_satacom_smoke-loader
- Size 2.3MB
- SHA256 371aa57db165e0c80deaf7a477983d871eaf8147baf8e28ed6c54595ab4feb22
- MD5 8c5b21d821857097fc61b00260548245
- SHA1 e55a9c47d119cace00275ac0979a5cc73ad9cc38
- SHA512 f9cab730b62b55103d45033d57c356b4be2fc9461b4012819ed21ee1739b62e0d6ff967af09066b1701b4f5fc79161c36e05e375b80614cb6757117f4b830e12
- SSDEEP 49152:hfU4UjrQUbiCZaoEKjKWQc2b1FVgbjrjxPe1pbPSQm1Flo+Lj:hfUbwU6KjKWQckVgtev5mnlNL
- TLSH T179B5F132A5E48036E6F10672BA249530BE7DFE341750886FA3D4BE1D2E78491AB77353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.