2026-06-28_b9192029147e79aee2f2bd102fa316e8_amadey_cobalt-strike_elex_hellokitty_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-28_b9192029147e79aee2f2bd102fa316e8_amadey_cobalt-strike_elex_hellokitty_smoke-loader
Size 170KB
Sample260630-rskbmsg12w
SHA256 62788f537c614d414fdd16496caf68ad89a62ff72086524cedecb4f4a6700e2a
MD5 b9192029147e79aee2f2bd102fa316e8
SHA1 10a03c47df54bf736d873255cd54acb9ada93ec8
SHA512 100bf87a5803020a8d55f5219e9d77a960908d4bcf89c02810f8d69ec6d27c492072c9748c7cb53c045863935b6311d6f5a9a984932df0d1240bb7c828f4803f
SSDEEP 3072:f8DzRXbBs5vTOv3T7OjVx4rItkSF0JZGe+rP/lOAg0FuD0k2jIkcVt:EDNUToT4ssmSaJZ4MAOJ2j3W
TLSH
T131047B10B5E2C4B2EA77057008F89B75597DBC310F214AFB67D80B7E4E342D19A35ABA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-28_b9192029147e79aee2f2bd102fa316e8_amadey_cobalt-strike_elex_hellokitty_smoke-loader

File Explorer

2026-06-28_b9192029147e79aee2f2bd102fa316e8_amadey_cobalt-strike_elex_hellokitty_smoke-loader

.exe 170KB

2026-06-28_b9192029147e79aee2f2bd102fa316e8_amadey_cobalt-strike_elex_hellokitty_smoke-loader

IMPHASH 801fc636756c27d965402138dd91417f
SHA256 62788f537c614d414fdd16496caf68ad89a62ff72086524cedecb4f4a6700e2a
MD5 b9192029147e79aee2f2bd102fa316e8
SHA1 10a03c47df54bf736d873255cd54acb9ada93ec8
SHA512 100bf87a5803020a8d55f5219e9d77a960908d4bcf89c02810f8d69ec6d27c492072c9748c7cb53c045863935b6311d6f5a9a984932df0d1240bb7c828f4803f
SSDEEP 3072:f8DzRXbBs5vTOv3T7OjVx4rItkSF0JZGe+rP/lOAg0FuD0k2jIkcVt:EDNUToT4ssmSaJZ4MAOJ2j3W
TLSH
T131047B10B5E2C4B2EA77057008F89B75597DBC310F214AFB67D80B7E4E342D19A35ABA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

34663

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

wnsprintfW PathCombineW

wininet

InternetOpenUrlW InternetReadFile InternetOpenW InternetCloseHandle HttpQueryInfoW

netapi32

NetServerEnum NetApiBufferFree NetShareEnum

shell32

ShellExecuteW SHGetFolderPathW ShellExecuteExW SHGetSpecialFolderPathW

advapi32

RegSetValueExW RegOpenKeyExW RegCloseKey

ole32

CoCreateInstance CoInitializeEx CoInitialize CoUninitialize

user32

SendMessageTimeoutW wsprintfW

kernel32

SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetProcessHeap GetCommandLineA GetOEMCP GetACP IsValidCodePage SetFilePointerEx HeapSize FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetCommandLineW DeleteCriticalSection FindFirstFileExW GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale MultiByteToWideChar GetProcAddress WideCharToMultiByte FindFirstFileW GetFileSizeEx FindNextFileW lstrlenW WriteFile GetModuleFileNameW GetTempPathW CreateMutexW FindClose GetVolumePathNameW WaitForSingleObject CreateFileW GetFileAttributesW SetFileAttributesW GetLogicalDriveStringsW GetLastError DeleteFileW CloseHandle CopyFileW lstrcmpiW GetTickCount GetDriveTypeW LCMapStringEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx WriteConsoleW EncodePointer DecodePointer CompareStringEx GetCPInfo GetStringTypeW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess GetLocaleInfoW RtlUnwind RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle ExitProcess GetModuleHandleExW HeapReAlloc HeapFree HeapAlloc LCMapStringW

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-28_b9192029147e79aee2f2bd102fa316e8_amadey_cobalt-strike_elex_hellokitty_smoke-loader

shlwapi

wininet

netapi32

shell32

advapi32

ole32

user32

kernel32

generic