General
- Target 2026-05-22_23d9b33ea238a92bc55e2a52c2c8be53_amadey_cobalt-strike_hellokitty_hijackloader_icedid_luca-stealer_njrat_satacom_smoke-loader_stealc
- Size 7.2MB
- Sample260522-3wrexabs3s
- SHA256 97563b9961dc7c692e1cb47550e26a19a4a4ae11ac65dbb7685f82e3d71182e3
- MD5 23d9b33ea238a92bc55e2a52c2c8be53
- SHA1 fb5217d965b6101fbf7abaf0c2adc6a114321ec6
- SHA512 a8125fc6f711c95fcee1a8d562c666fe5cce4d57cf1b2c2dd9dab86d3f7ba808992cb3bc8cca1dc18c9b13077f7d67ef3a441a0ad686b617d1f30256d46acb4f
- SSDEEP 98304:WQrxiMaBjGKBT1DMzZnlJPiIhxzoX2MgUrmWKjKWQckVgtev5mnlNL3:DpaQaRDMzJ3JTHMRrm7KWQc0gEYnvL3
- TLSH T1D776D11AB7A500F8C1E7D9B8CA165D13EAB2781513329ADB17E0D9591F23AF05F3E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-05-22_23d9b33ea238a92bc55e2a52c2c8be53_amadey_cobalt-strike_hellokitty_hijackloader_icedid_luca.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_23d9b33ea238a92bc55e2a52c2c8be53_amadey_cobalt-strike_hellokitty_hijackloader_icedid_luca.exe
Resource
win11-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_23d9b33ea238a92bc55e2a52c2c8be53_amadey_cobalt-strike_hellokitty_hijackloader_icedid_luca-stealer_njrat_satacom_smoke-loader_stealc
- Size 7.2MB
- SHA256 97563b9961dc7c692e1cb47550e26a19a4a4ae11ac65dbb7685f82e3d71182e3
- MD5 23d9b33ea238a92bc55e2a52c2c8be53
- SHA1 fb5217d965b6101fbf7abaf0c2adc6a114321ec6
- SHA512 a8125fc6f711c95fcee1a8d562c666fe5cce4d57cf1b2c2dd9dab86d3f7ba808992cb3bc8cca1dc18c9b13077f7d67ef3a441a0ad686b617d1f30256d46acb4f
- SSDEEP 98304:WQrxiMaBjGKBT1DMzZnlJPiIhxzoX2MgUrmWKjKWQckVgtev5mnlNL3:DpaQaRDMzJ3JTHMRrm7KWQc0gEYnvL3
- TLSH T1D776D11AB7A500F8C1E7D9B8CA165D13EAB2781513329ADB17E0D9591F23AF05F3E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled