0351018f5156a945a8f5cad1db06a7ae1888d365c291f0bdd5477669d835d1fd

Analysis

max time kernel
149s
max time network
122s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/06/2026, 16:59

Target
2026-06-02_cf16fed4ce24a176ae1d25454b741fec_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe
Size 436KB
Sample260602-vhm7bsct6m
SHA256 0351018f5156a945a8f5cad1db06a7ae1888d365c291f0bdd5477669d835d1fd
MD5 cf16fed4ce24a176ae1d25454b741fec
SHA1 b887b69ce74d1a302e8963bac80024c2a195a743
SHA512 4ede0b6a3a33f1e9bda0baef43406d7a039b39a7d1e976c842b91492d184e3dbf2cb8213010abb6bbe66aa99505f853444760c4e929d6bcef79dec808cbf3d0f
SSDEEP 12288:OG8LjBTqKObM/lj1FBghDXZmt15z4hwUc/:OGw8KH/B1FBgDXZQV4W/
TLSH
T1EE94DF107EC1C4B2D53A05321464DBB6C67CF8341B619ACBA3D94B6A1E305E1DF3AF6A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4032	3244	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2026-06-02_cf16fed4ce24a176ae1d25454b741fec_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-02_cf16fed4ce24a176ae1d25454b741fec_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_smoke-loader.exe"
1⤵
PID:3244
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3244 -s 8
  2⤵
  - Program crash
  PID:4032

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3244 -ip 3244
1⤵
PID:2952