General
- Target 2026-07-09_bdf661845c1f6a4d8ea221cc3ec6b70b_amadey_cobalt-strike_elex_hellokitty_luca-stealer_lynx_njrat
- Size 104KB
- Sample260709-marksaht4x
- SHA256 c57a5c09d6dff5fbbfbec3e287417ba84466907a99ebf9a5791e6716f657da0a
- MD5 bdf661845c1f6a4d8ea221cc3ec6b70b
- SHA1 d50d9ffab752ab336d4b3dda944d8d2586d96855
- SHA512 6826614759e747d0a1cdfc6b80097e308ae3998b005dc4a8bb9edca2b2c95c42fb5836fa9bafb3dd6c5d2cafc6689dcb1b1e4af09d2a78253f09ce9af207af7f
- SSDEEP 3072:jn6UjuJwgr0JMA/3abz17Ndpv61LU4iemadomfULq4vJu:jnN6SfJMA/wZpvr4iidIxu
- TLSH T1B0A37C5174C1C072E576293A4930DAB04E2DFE301F60EE9B778855BA4F306D1DA2AE7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_bdf661845c1f6a4d8ea221cc3ec6b70b_amadey_cobalt-strike_elex_hellokitty_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_bdf661845c1f6a4d8ea221cc3ec6b70b_amadey_cobalt-strike_elex_hellokitty_luca-stealer_lynx_njrat.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_bdf661845c1f6a4d8ea221cc3ec6b70b_amadey_cobalt-strike_elex_hellokitty_luca-stealer_lynx_njrat
- Size 104KB
- SHA256 c57a5c09d6dff5fbbfbec3e287417ba84466907a99ebf9a5791e6716f657da0a
- MD5 bdf661845c1f6a4d8ea221cc3ec6b70b
- SHA1 d50d9ffab752ab336d4b3dda944d8d2586d96855
- SHA512 6826614759e747d0a1cdfc6b80097e308ae3998b005dc4a8bb9edca2b2c95c42fb5836fa9bafb3dd6c5d2cafc6689dcb1b1e4af09d2a78253f09ce9af207af7f
- SSDEEP 3072:jn6UjuJwgr0JMA/3abz17Ndpv61LU4iemadomfULq4vJu:jnN6SfJMA/wZpvr4iidIxu
- TLSH T1B0A37C5174C1C072E576293A4930DAB04E2DFE301F60EE9B778855BA4F306D1DA2AE7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.