General
- Target 2026-05-31_6d16d70810567c80f64fc3d8e92d3286_amadey_cobalt-strike_elex_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_vidar
- Size 21.0MB
- Sample260531-hrvasabw21
- SHA256 73abc773142c3705d7a2fdff3744892e4c5ee62bb16a231d67a9d10b74a1394e
- MD5 6d16d70810567c80f64fc3d8e92d3286
- SHA1 8bfa15614e33313235e848e70868bd2602c187eb
- SHA512 b873dea1ea171e49c1a826b11a690fa720a9ef9a04c8fadac29d02124de462cb4eb5edbc375d99ba13c99685db302d2240bad0877af3492b399fd2de8affaca7
- SSDEEP 393216:Ba2S33iymbqVcxINazKwdf89nRyE2UV5BpVqYR8Am9RGgfAOFnYIg:eSymbqVpNazr8TyE2UVjpG7pH7g
- TLSH T193272312B7E040B4E4639231896D9635D97BFC110B31DADF07D17A2A2F326D25B3BB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-31_6d16d70810567c80f64fc3d8e92d3286_amadey_cobalt-strike_elex_hellokitty_hijackloader_icedid.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-31_6d16d70810567c80f64fc3d8e92d3286_amadey_cobalt-strike_elex_hellokitty_hijackloader_icedid.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-31_6d16d70810567c80f64fc3d8e92d3286_amadey_cobalt-strike_elex_hellokitty_hijackloader_icedid_luca-stealer_njrat_remcos_vidar
- Size 21.0MB
- SHA256 73abc773142c3705d7a2fdff3744892e4c5ee62bb16a231d67a9d10b74a1394e
- MD5 6d16d70810567c80f64fc3d8e92d3286
- SHA1 8bfa15614e33313235e848e70868bd2602c187eb
- SHA512 b873dea1ea171e49c1a826b11a690fa720a9ef9a04c8fadac29d02124de462cb4eb5edbc375d99ba13c99685db302d2240bad0877af3492b399fd2de8affaca7
- SSDEEP 393216:Ba2S33iymbqVcxINazKwdf89nRyE2UV5BpVqYR8Am9RGgfAOFnYIg:eSymbqVpNazr8TyE2UVjpG7pH7g
- TLSH T193272312B7E040B4E4639231896D9635D97BFC110B31DADF07D17A2A2F326D25B3BB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory