General
- Target 2026-05-22_238f11af59e28652beaf1d405bffcf32_amadey_cobalt-strike_hellokitty_hijackloader_luca-stealer_njrat_satacom_smoke-loader_stealc_vidar
- Size 2.5MB
- Sample260522-3wlvesbs2y
- SHA256 8d03b3ded265cf17796c5f5e7b3f6b8affd14c51eee0fe29ff84e8755cd046df
- MD5 238f11af59e28652beaf1d405bffcf32
- SHA1 7efe7e1a41486fe87c29ca311642a1e1a3fcc624
- SHA512 659be800e25fc14fbbaf343d82dd21c700e188efcd616d16c672b7afaa35fa94011b363d00ff2c9ee703302a75cb31f4ca04e43a9ce52ed0f1c68dea8fefea73
- SSDEEP 49152:4bUAoGW1PszNsQVKjKWQc2b1FVgbjrjxPe1pbPSQm1Flo+Lj:kW1PszBKjKWQckVgtev5mnlNL
- TLSH T14EC5D002ABEA10B5F2B22930893651255E77BD211B70D6DF13946C7E4F73AC09E39B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_238f11af59e28652beaf1d405bffcf32_amadey_cobalt-strike_hellokitty_hijackloader_luca-steale.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_238f11af59e28652beaf1d405bffcf32_amadey_cobalt-strike_hellokitty_hijackloader_luca-steale.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_238f11af59e28652beaf1d405bffcf32_amadey_cobalt-strike_hellokitty_hijackloader_luca-stealer_njrat_satacom_smoke-loader_stealc_vidar
- Size 2.5MB
- SHA256 8d03b3ded265cf17796c5f5e7b3f6b8affd14c51eee0fe29ff84e8755cd046df
- MD5 238f11af59e28652beaf1d405bffcf32
- SHA1 7efe7e1a41486fe87c29ca311642a1e1a3fcc624
- SHA512 659be800e25fc14fbbaf343d82dd21c700e188efcd616d16c672b7afaa35fa94011b363d00ff2c9ee703302a75cb31f4ca04e43a9ce52ed0f1c68dea8fefea73
- SSDEEP 49152:4bUAoGW1PszNsQVKjKWQc2b1FVgbjrjxPe1pbPSQm1Flo+Lj:kW1PszBKjKWQckVgtev5mnlNL
- TLSH T14EC5D002ABEA10B5F2B22930893651255E77BD211B70D6DF13946C7E4F73AC09E39B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.