General

  • Target
    2026-05-22_238f11af59e28652beaf1d405bffcf32_amadey_cobalt-strike_hellokitty_hijackloader_luca-stealer_njrat_satacom_smoke-loader_stealc_vidar
  • Size 2.5MB
  • Sample260522-3wlvesbs2y
  • SHA256 8d03b3ded265cf17796c5f5e7b3f6b8affd14c51eee0fe29ff84e8755cd046df
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-05-22_238f11af59e28652beaf1d405bffcf32_amadey_cobalt-strike_hellokitty_hijackloader_luca-stealer_njrat_satacom_smoke-loader_stealc_vidar
    • Size 2.5MB
    • SHA256 8d03b3ded265cf17796c5f5e7b3f6b8affd14c51eee0fe29ff84e8755cd046df
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v16

Tasks