General
- Target 2026-05-22_3ba4d31dd8367d07283d5eaa032051ca_amadey_cobalt-strike_glassworm_hawkeye_hellokitty_hijackloader_luca-stealer_njrat_remcos_satacom_smoke-loader_vidar
- Size 2.5MB
- Sample260522-3y76fabs7s
- SHA256 9b7bc68c7050763c4420cc31db8da4c4dbfcae5bf9425c3a6c0822e74902ecee
- MD5 3ba4d31dd8367d07283d5eaa032051ca
- SHA1 fc4c30d6d019d5302590b03b00858182d8edcf23
- SHA512 3ee32a63cf458955654e50e757495be0319762b4858ab7d5937c202c943161035ff789c6d798708d1d35131bcad3c55b51afd0185e3b0045947454d81e3514a7
- SSDEEP 49152:4by4p67pb4qatglwKjKWQc2b1FVgbjrjxPe1pbPSQm1Flo+Lj:D7pyPKjKWQckVgtev5mnlNL
- TLSH T17CC5BF01B7E99076F1B30B30997642525B76BC615F31A39F23C06A7D4E72AC0EA35B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_3ba4d31dd8367d07283d5eaa032051ca_amadey_cobalt-strike_glassworm_hawkeye_hellokitty_hijack.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_3ba4d31dd8367d07283d5eaa032051ca_amadey_cobalt-strike_glassworm_hawkeye_hellokitty_hijack.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_3ba4d31dd8367d07283d5eaa032051ca_amadey_cobalt-strike_glassworm_hawkeye_hellokitty_hijackloader_luca-stealer_njrat_remcos_satacom_smoke-loader_vidar
- Size 2.5MB
- SHA256 9b7bc68c7050763c4420cc31db8da4c4dbfcae5bf9425c3a6c0822e74902ecee
- MD5 3ba4d31dd8367d07283d5eaa032051ca
- SHA1 fc4c30d6d019d5302590b03b00858182d8edcf23
- SHA512 3ee32a63cf458955654e50e757495be0319762b4858ab7d5937c202c943161035ff789c6d798708d1d35131bcad3c55b51afd0185e3b0045947454d81e3514a7
- SSDEEP 49152:4by4p67pb4qatglwKjKWQc2b1FVgbjrjxPe1pbPSQm1Flo+Lj:D7pyPKjKWQckVgtev5mnlNL
- TLSH T17CC5BF01B7E99076F1B30B30997642525B76BC615F31A39F23C06A7D4E72AC0EA35B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.