General
- Target 2026-06-29_fec00a72db75e6c26629ee787690338a_amadey_cobalt-strike_elex_floxif_hellokitty_hijackloader_luca-stealer_njrat_play_smoke-loader
- Size 245KB
- Sample260630-a6cehsbs7t
- SHA256 36f9b9b3b44b1b0b701a1690ade0cbe200581da2974759a5ae27d5d2ecc7d45b
- MD5 fec00a72db75e6c26629ee787690338a
- SHA1 5e2763a174199be404e924a76154c7d39ba793ea
- SHA512 5971853360bcd105f110f14136660b3c952a399047ae506c4db0eaaa5e6e42e6f7281790539d4c1a030a6121a2aa8b1cecdc96271ab4f1339a87e965101e8b48
- SSDEEP 6144:CN0GSPrGxzQ9g+omtubv6hVHlE3FBV+UdvrEFp7hKI:VDPrGxzQ9g+1ubv6hM3FBjvrEH7H
- TLSH T1A834AE5032C083FAD563093035B8AA6159FDFD3C0FAA49DBA35517595E7C2D38A38B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_fec00a72db75e6c26629ee787690338a_amadey_cobalt-strike_elex_floxif_hellokitty_hijackloader.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_fec00a72db75e6c26629ee787690338a_amadey_cobalt-strike_elex_floxif_hellokitty_hijackloader.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_fec00a72db75e6c26629ee787690338a_amadey_cobalt-strike_elex_floxif_hellokitty_hijackloader_luca-stealer_njrat_play_smoke-loader
- Size 245KB
- SHA256 36f9b9b3b44b1b0b701a1690ade0cbe200581da2974759a5ae27d5d2ecc7d45b
- MD5 fec00a72db75e6c26629ee787690338a
- SHA1 5e2763a174199be404e924a76154c7d39ba793ea
- SHA512 5971853360bcd105f110f14136660b3c952a399047ae506c4db0eaaa5e6e42e6f7281790539d4c1a030a6121a2aa8b1cecdc96271ab4f1339a87e965101e8b48
- SSDEEP 6144:CN0GSPrGxzQ9g+omtubv6hVHlE3FBV+UdvrEFp7hKI:VDPrGxzQ9g+1ubv6hM3FBjvrEH7H
- TLSH T1A834AE5032C083FAD563093035B8AA6159FDFD3C0FAA49DBA35517595E7C2D38A38B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.