General
- Target 2026-04-20_c35ea4222bd960d30c35eaf5ae3f723c_amadey_cobalt-strike_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 10.1MB
- Sample260420-svwccsh16w
- SHA256 5b7af63ff3ced95c5d56f9a89d5865ae82ab71901c144b866e15ba051f61e5b3
- MD5 c35ea4222bd960d30c35eaf5ae3f723c
- SHA1 a0c5311dc9a5cc4f977f7c14ef2dd9064f22043b
- SHA512 b66f1014c0e9f165c1cec66bcf40db84143a82e9ee7cb88c9dc11b96c8856572fd0e199e69efab5db4b9d6b4aa93b5e019d603f6f98aaa606777c56a1b64fb55
- SSDEEP 196608:2+KWQc0gEYnvL4j+KWQc0gEYnvL4P/jCbj+KWQc0gEYnvL4j+KWQc0gEYnvL4P/g:2/cZEIvY/cZEIvmCX/cZEIvY/cZEIvm8
- TLSH T1D1B6E12672A044B5E6B205359965C130FF7AFD251B20C7DF63D09A2E2F326D1AE3B712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-20_c35ea4222bd960d30c35eaf5ae3f723c_amadey_cobalt-strike_hellokitty_hijackloader_icedid_luca.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-20_c35ea4222bd960d30c35eaf5ae3f723c_amadey_cobalt-strike_hellokitty_hijackloader_icedid_luca.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_c35ea4222bd960d30c35eaf5ae3f723c_amadey_cobalt-strike_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 10.1MB
- SHA256 5b7af63ff3ced95c5d56f9a89d5865ae82ab71901c144b866e15ba051f61e5b3
- MD5 c35ea4222bd960d30c35eaf5ae3f723c
- SHA1 a0c5311dc9a5cc4f977f7c14ef2dd9064f22043b
- SHA512 b66f1014c0e9f165c1cec66bcf40db84143a82e9ee7cb88c9dc11b96c8856572fd0e199e69efab5db4b9d6b4aa93b5e019d603f6f98aaa606777c56a1b64fb55
- SSDEEP 196608:2+KWQc0gEYnvL4j+KWQc0gEYnvL4P/jCbj+KWQc0gEYnvL4j+KWQc0gEYnvL4P/g:2/cZEIvY/cZEIvmCX/cZEIvY/cZEIvm8
- TLSH T1D1B6E12672A044B5E6B205359965C130FF7AFD251B20C7DF63D09A2E2F326D1AE3B712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.