General
- Target 2026-05-28_9034f6f895a840ceda74d72987979f55_amadey_cobalt-strike_elex_emotet_hellokitty_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
- Size 405KB
- Sample260528-ctvrfafv5t
- SHA256 167283f6873dc23bcc49527a2886d407f19ef84b7d75ede9e32fdd802b4461d7
- MD5 9034f6f895a840ceda74d72987979f55
- SHA1 837837c98859dda5e58b12de8d81863ca500d98e
- SHA512 4d9e149e5d5cf15a12ac4bd7c2822fe047618196aeac516802ff5a8ed61d4ed2e24607d6a165f03fe52f0170ce2e524a44aa2022e2c12427c68bd30415d63538
- SSDEEP 12288:GaoVql+84Y0ImGUcsvZZdubv7u2l35iuWXI:GDVqlzYxGBcslpiuWXI
- TLSH T14F947B1136D08EB2E5AF043049B19A719A7BFD301F219BCB63947F593E306C19A3A767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-28_9034f6f895a840ceda74d72987979f55_amadey_cobalt-strike_elex_emotet_hellokitty_hijackloader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-28_9034f6f895a840ceda74d72987979f55_amadey_cobalt-strike_elex_emotet_hellokitty_hijackloader.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-28_9034f6f895a840ceda74d72987979f55_amadey_cobalt-strike_elex_emotet_hellokitty_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
- Size 405KB
- SHA256 167283f6873dc23bcc49527a2886d407f19ef84b7d75ede9e32fdd802b4461d7
- MD5 9034f6f895a840ceda74d72987979f55
- SHA1 837837c98859dda5e58b12de8d81863ca500d98e
- SHA512 4d9e149e5d5cf15a12ac4bd7c2822fe047618196aeac516802ff5a8ed61d4ed2e24607d6a165f03fe52f0170ce2e524a44aa2022e2c12427c68bd30415d63538
- SSDEEP 12288:GaoVql+84Y0ImGUcsvZZdubv7u2l35iuWXI:GDVqlzYxGBcslpiuWXI
- TLSH T14F947B1136D08EB2E5AF043049B19A719A7BFD301F219BCB63947F593E306C19A3A767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Loads dropped DLL
Drops file in System32 directory