General
- Target 2026-04-27_7b3e30f001ec023ec99aaded84945fa8_amadey_cobalt-strike_elex_emotet_hellokitty_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
- Size 405KB
- Sample260427-ftfjasb15w
- SHA256 ddad5514f15e2daaee2500d7ef3953cf77ec7fb4c5005a08c54f8e93332154e1
- MD5 7b3e30f001ec023ec99aaded84945fa8
- SHA1 23dbbafdeae1a93af3717149671eb5609b3e7b20
- SHA512 0c04af7a276686bd9eaffcb97845aab02ef5804a979525896f9648a1c39e8e269bf6e5b7d583671ccffeb19eacd359f70d9d516b0f4c3e5e9ad4540114e1f26d
- SSDEEP 12288:GaoVql+84Y0ImGUcsvZZdubv7u2l35iuWX+:GDVqlzYxGBcslpiuWX+
- TLSH T11C947B1136D08EB2E5AF043049B19A719A7BFD301F219BCB63947F593E306C19A3A767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-27_7b3e30f001ec023ec99aaded84945fa8_amadey_cobalt-strike_elex_emotet_hellokitty_hijackloader.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-27_7b3e30f001ec023ec99aaded84945fa8_amadey_cobalt-strike_elex_emotet_hellokitty_hijackloader.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-27_7b3e30f001ec023ec99aaded84945fa8_amadey_cobalt-strike_elex_emotet_hellokitty_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
- Size 405KB
- SHA256 ddad5514f15e2daaee2500d7ef3953cf77ec7fb4c5005a08c54f8e93332154e1
- MD5 7b3e30f001ec023ec99aaded84945fa8
- SHA1 23dbbafdeae1a93af3717149671eb5609b3e7b20
- SHA512 0c04af7a276686bd9eaffcb97845aab02ef5804a979525896f9648a1c39e8e269bf6e5b7d583671ccffeb19eacd359f70d9d516b0f4c3e5e9ad4540114e1f26d
- SSDEEP 12288:GaoVql+84Y0ImGUcsvZZdubv7u2l35iuWX+:GDVqlzYxGBcslpiuWX+
- TLSH T11C947B1136D08EB2E5AF043049B19A719A7BFD301F219BCB63947F593E306C19A3A767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory