General
- Target 2026-06-27_d6e9717f87177450c4b3e96d1b9e8069_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 126KB
- Sample260629-cxe56act7j
- SHA256 0dff3b99708a58c2afe6688cd5351d994945e8cb12e9cac76f2f0bff5d9f14eb
- MD5 d6e9717f87177450c4b3e96d1b9e8069
- SHA1 af68c180fcff00ee840791f28bb77a6ec82b525a
- SHA512 a346e36b1b4d5461f84b7962b6455ea6d8b6a949e4ac957e470dbba37995af451cb9e3babbf6bf041f2d3ba8bd878759347e1d8b24667c3e8f2d9657bd6ca54f
- SSDEEP 3072:mjJ8DuMUDO2beIqvUFmmDi2RF2leTVvu1RP3Js0D9m:mF8KMieByi+e/emg
- TLSH T1CAC38D22B5D08472D973293115B0DAB15E3DFE700F50AEAF239845BA0F707C1DA69A7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-06-27_d6e9717f87177450c4b3e96d1b9e8069_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_d6e9717f87177450c4b3e96d1b9e8069_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260618-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_d6e9717f87177450c4b3e96d1b9e8069_amadey_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_lynx_njrat
- Size 126KB
- SHA256 0dff3b99708a58c2afe6688cd5351d994945e8cb12e9cac76f2f0bff5d9f14eb
- MD5 d6e9717f87177450c4b3e96d1b9e8069
- SHA1 af68c180fcff00ee840791f28bb77a6ec82b525a
- SHA512 a346e36b1b4d5461f84b7962b6455ea6d8b6a949e4ac957e470dbba37995af451cb9e3babbf6bf041f2d3ba8bd878759347e1d8b24667c3e8f2d9657bd6ca54f
- SSDEEP 3072:mjJ8DuMUDO2beIqvUFmmDi2RF2leTVvu1RP3Js0D9m:mF8KMieByi+e/emg
- TLSH T1CAC38D22B5D08472D973293115B0DAB15E3DFE700F50AEAF239845BA0F707C1DA69A7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.