General
- Target 2026-05-27_14263c309df4c596493ff38b927b4737_amadey_cobalt-strike_hellokitty_hijackloader_luca-stealer_njrat_satacom_smoke-loader_vidar
- Size 2.3MB
- Sample260527-ske8dsbt2z
- SHA256 6e13fc3341fa38ef208421b4add2256aae6a08299d507bf031af168b8a6b1e2b
- MD5 14263c309df4c596493ff38b927b4737
- SHA1 d07cf747d6ea7981532e14ae5d9fa5131a1f428f
- SHA512 8df220a69512f94825f38086e555d4b368ad98581db9f62ee9daa91c976f9c8911abb153ef023f2b75ca135c203d4f05b70945b5cbc2e4789d69f1af6c517430
- SSDEEP 49152:e/ev6Jwq0iw2OKjKWQc2b1FVgbjrjxPe1pbPSQm1Flo+Lj:wQKjKWQckVgtev5mnlNL
- TLSH T1C8B5CE1537FC0869F1FB663499B086059AB2BC665B31D3CF129096AD1E33BC0AD35B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-27_14263c309df4c596493ff38b927b4737_amadey_cobalt-strike_hellokitty_hijackloader_luca-steale.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-27_14263c309df4c596493ff38b927b4737_amadey_cobalt-strike_hellokitty_hijackloader_luca-steale.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-27_14263c309df4c596493ff38b927b4737_amadey_cobalt-strike_hellokitty_hijackloader_luca-stealer_njrat_satacom_smoke-loader_vidar
- Size 2.3MB
- SHA256 6e13fc3341fa38ef208421b4add2256aae6a08299d507bf031af168b8a6b1e2b
- MD5 14263c309df4c596493ff38b927b4737
- SHA1 d07cf747d6ea7981532e14ae5d9fa5131a1f428f
- SHA512 8df220a69512f94825f38086e555d4b368ad98581db9f62ee9daa91c976f9c8911abb153ef023f2b75ca135c203d4f05b70945b5cbc2e4789d69f1af6c517430
- SSDEEP 49152:e/ev6Jwq0iw2OKjKWQc2b1FVgbjrjxPe1pbPSQm1Flo+Lj:wQKjKWQckVgtev5mnlNL
- TLSH T1C8B5CE1537FC0869F1FB663499B086059AB2BC665B31D3CF129096AD1E33BC0AD35B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.