General
- Target 2026-05-23_1ead9666c1b00f32d270a2072e9fff60_amadey_cobalt-strike_darkgate_hellokitty_hijackloader_icedid_luca-stealer_njrat_satacom_smoke-loader_wannacry
- Size 3.5MB
- Sample260523-cddg8aay2j
- SHA256 a4b5661685b28ff5d1d68a81de665290809604409c31de7f540ca3fe7776582a
- MD5 1ead9666c1b00f32d270a2072e9fff60
- SHA1 f43e0355b01c391f98c9c85d7028080d1de6f437
- SHA512 73770b72da613acf25d65065435aa3767050c66bec0092f01276d192f822ce59aac0904b11f882f0b3696d5c631cf39f7169d38439657ee0e72f684e91e94227
- SSDEEP 98304:3r7+4jJKRuy5aQWKjKWQckVgtev5mnlNL:3rjjJq97KWQc0gEYnvL
- TLSH T1EC06AE02769049B1E56719304625A66D5B7BBD10CE238FCB13901EEEFFF1A809E29737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-23_1ead9666c1b00f32d270a2072e9fff60_amadey_cobalt-strike_darkgate_hellokitty_hijackloader_ic.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-23_1ead9666c1b00f32d270a2072e9fff60_amadey_cobalt-strike_darkgate_hellokitty_hijackloader_ic.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-23_1ead9666c1b00f32d270a2072e9fff60_amadey_cobalt-strike_darkgate_hellokitty_hijackloader_icedid_luca-stealer_njrat_satacom_smoke-loader_wannacry
- Size 3.5MB
- SHA256 a4b5661685b28ff5d1d68a81de665290809604409c31de7f540ca3fe7776582a
- MD5 1ead9666c1b00f32d270a2072e9fff60
- SHA1 f43e0355b01c391f98c9c85d7028080d1de6f437
- SHA512 73770b72da613acf25d65065435aa3767050c66bec0092f01276d192f822ce59aac0904b11f882f0b3696d5c631cf39f7169d38439657ee0e72f684e91e94227
- SSDEEP 98304:3r7+4jJKRuy5aQWKjKWQckVgtev5mnlNL:3rjjJq97KWQc0gEYnvL
- TLSH T1EC06AE02769049B1E56719304625A66D5B7BBD10CE238FCB13901EEEFFF1A809E29737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.