General
- Target 2026-06-02_167ff2af934533fc9837d32f5d0f45d8_amadey_cobalt-strike_fabookie_hellokitty_hijackloader_icedid_luca-stealer_njrat_satacom_vidar
- Size 1.9MB
- Sample260602-s2de5aav4k
- SHA256 bbf2b7884c825e464c3d926f5fff3a30f13baecc1e5b622706e019fe7e77a8ad
- MD5 167ff2af934533fc9837d32f5d0f45d8
- SHA1 15c22a1b4ff7e6b8bc142e78c1e9591cbd7aa785
- SHA512 102fa19cc8204ebba19de999b81233fcb077016e5be4f212c5a5eb2fcf51a5cb8d3818620e8b90246dafa76ae516543df33a4b24fb87ee5ca60c2057b8f3af5e
- SSDEEP 49152:hAQtAfoO7U+hhiVeYuWO7U+hUYbU83Kw02qg3Tq:mvwOh3XWOhFv3Kw02qg3Tq
- TLSH T12D9539027A9DBCE4D0719035577387E29B38FC611B90D58F62D17F2A693A1D3B928B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_167ff2af934533fc9837d32f5d0f45d8_amadey_cobalt-strike_fabookie_hellokitty_hijackloader_ic.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_167ff2af934533fc9837d32f5d0f45d8_amadey_cobalt-strike_fabookie_hellokitty_hijackloader_ic.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_167ff2af934533fc9837d32f5d0f45d8_amadey_cobalt-strike_fabookie_hellokitty_hijackloader_icedid_luca-stealer_njrat_satacom_vidar
- Size 1.9MB
- SHA256 bbf2b7884c825e464c3d926f5fff3a30f13baecc1e5b622706e019fe7e77a8ad
- MD5 167ff2af934533fc9837d32f5d0f45d8
- SHA1 15c22a1b4ff7e6b8bc142e78c1e9591cbd7aa785
- SHA512 102fa19cc8204ebba19de999b81233fcb077016e5be4f212c5a5eb2fcf51a5cb8d3818620e8b90246dafa76ae516543df33a4b24fb87ee5ca60c2057b8f3af5e
- SSDEEP 49152:hAQtAfoO7U+hhiVeYuWO7U+hUYbU83Kw02qg3Tq:mvwOh3XWOhFv3Kw02qg3Tq
- TLSH T12D9539027A9DBCE4D0719035577387E29B38FC611B90D58F62D17F2A693A1D3B928B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Drops file in System32 directory