General
- Target 2026-06-03_40d8597d77ae8e5d84dff4ee35dbf297_amadey_cloudeye_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
- Size 402KB
- Sample260603-2bed6sey91
- SHA256 0c68e6460cbf2441d7a781a1a1eea8395b1e665ae5387a055315b8f06259edc2
- MD5 40d8597d77ae8e5d84dff4ee35dbf297
- SHA1 b5ada9dd3102ad2ef7bce880b0a951b7536565b8
- SHA512 ca2d4e7fb39be4251df18967104a9539da95ee3cff93be5a04681b4a309e471902f9dc4b95d7c815c49e72e5341cb234873062ed0344e1ccf75c1b7018103576
- SSDEEP 6144:wSdZF2dMG8LjN7TqK8tsp6zT4DteUjD5F4W9oU5DOY7y4j9N:DG8LjBTqKSTzUjD5FZ9oU5DO69N
- TLSH T186949E02BBC0C472E9B606312875DB356F7AFC350E90874B6354776DAE31382AE2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-03_40d8597d77ae8e5d84dff4ee35dbf297_amadey_cloudeye_cobalt-strike_elex_hellokitty_hijackload.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-03_40d8597d77ae8e5d84dff4ee35dbf297_amadey_cloudeye_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
- Size 402KB
- SHA256 0c68e6460cbf2441d7a781a1a1eea8395b1e665ae5387a055315b8f06259edc2
- MD5 40d8597d77ae8e5d84dff4ee35dbf297
- SHA1 b5ada9dd3102ad2ef7bce880b0a951b7536565b8
- SHA512 ca2d4e7fb39be4251df18967104a9539da95ee3cff93be5a04681b4a309e471902f9dc4b95d7c815c49e72e5341cb234873062ed0344e1ccf75c1b7018103576
- SSDEEP 6144:wSdZF2dMG8LjN7TqK8tsp6zT4DteUjD5F4W9oU5DOY7y4j9N:DG8LjBTqKSTzUjD5FZ9oU5DO69N
- TLSH T186949E02BBC0C472E9B606312875DB356F7AFC350E90874B6354776DAE31382AE2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory