General
- Target 2026-05-22_f0324eef0ab43efc043d0c8e92ef9ba9_amadey_cobalt-strike_darkgate_hellokitty_hijackloader_luca-stealer_njrat_satacom_smoke-loader_stop_vidar
- Size 2.3MB
- Sample260523-atts2abz7v
- SHA256 a9cb746b588c1f7d864a755ead393a6f46efae08216e146ddc59d70916fc5519
- MD5 f0324eef0ab43efc043d0c8e92ef9ba9
- SHA1 fe026ff2dcb56cc5dd2b8d2a4dec8e3e111d2829
- SHA512 665607a9961a7bd818c937e1bd63414cc37d4e65b5b460cb1f90b6fc7bf024a20a1e85f703d9b713b1f96ff9ba8e070994cb97f16ff296cd75bef4389926ce1b
- SSDEEP 49152:4bQDd79WCGEKjKWQc2b1FVgbjrjxPe1pbPSQm1Flo+Lj:5p7hKjKWQckVgtev5mnlNL
- TLSH T100B5E0117BE1903AF1B34930897B86159A39BC715F60A6DF53C06ABE4E31AC0EE35B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_f0324eef0ab43efc043d0c8e92ef9ba9_amadey_cobalt-strike_darkgate_hellokitty_hijackloader_lu.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_f0324eef0ab43efc043d0c8e92ef9ba9_amadey_cobalt-strike_darkgate_hellokitty_hijackloader_lu.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_f0324eef0ab43efc043d0c8e92ef9ba9_amadey_cobalt-strike_darkgate_hellokitty_hijackloader_luca-stealer_njrat_satacom_smoke-loader_stop_vidar
- Size 2.3MB
- SHA256 a9cb746b588c1f7d864a755ead393a6f46efae08216e146ddc59d70916fc5519
- MD5 f0324eef0ab43efc043d0c8e92ef9ba9
- SHA1 fe026ff2dcb56cc5dd2b8d2a4dec8e3e111d2829
- SHA512 665607a9961a7bd818c937e1bd63414cc37d4e65b5b460cb1f90b6fc7bf024a20a1e85f703d9b713b1f96ff9ba8e070994cb97f16ff296cd75bef4389926ce1b
- SSDEEP 49152:4bQDd79WCGEKjKWQc2b1FVgbjrjxPe1pbPSQm1Flo+Lj:5p7hKjKWQckVgtev5mnlNL
- TLSH T100B5E0117BE1903AF1B34930897B86159A39BC715F60A6DF53C06ABE4E31AC0EE35B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.