2026-07-10_a5e4a272185c9478475f11078bbf9fea_amadey_elex_hellokitty

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-10_a5e4a272185c9478475f11078bbf9fea_amadey_elex_hellokitty
Size 839KB
Sample260710-k3kltsgv5n
SHA256 fcfd1810a69f0240aaaf139b089ec15c25500e9caaa7b2733f3474c6a2286247
MD5 a5e4a272185c9478475f11078bbf9fea
SHA1 634b8bedf7ae665b930002928e37e4919d16b057
SHA512 a9e00d7068d572c697eb321b1cc0df1bb486b67ac5e1db4890628aceec3dc2ef2eb34aa46389a35c235609fc86dd26ccf3599ccbd7103958de327f53e9bb4a4f
SSDEEP 12288:g37xHGaxin78K4xXPuMy6UAO8IiQnB2EELcu0Fr1:g37rfXgL6CP3DEQR
TLSH
T175058D2437EC8B36F6EE537AE877091543F6E4266726D78F19C8A8ED1C53B824811363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-10_a5e4a272185c9478475f11078bbf9fea_amadey_elex_hellokitty

File Explorer

2026-07-10_a5e4a272185c9478475f11078bbf9fea_amadey_elex_hellokitty

.exe 839KB

2026-07-10_a5e4a272185c9478475f11078bbf9fea_amadey_elex_hellokitty

IMPHASH ffff45487d1e51fa972c8409931457df
SHA256 fcfd1810a69f0240aaaf139b089ec15c25500e9caaa7b2733f3474c6a2286247
MD5 a5e4a272185c9478475f11078bbf9fea
SHA1 634b8bedf7ae665b930002928e37e4919d16b057
SHA512 a9e00d7068d572c697eb321b1cc0df1bb486b67ac5e1db4890628aceec3dc2ef2eb34aa46389a35c235609fc86dd26ccf3599ccbd7103958de327f53e9bb4a4f
SSDEEP 12288:g37xHGaxin78K4xXPuMy6UAO8IiQnB2EELcu0Fr1:g37rfXgL6CP3DEQR
TLSH
T175058D2437EC8B36F6EE537AE877091543F6E4266726D78F19C8A8ED1C53B824811363
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

65536

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\a\_work\1\s\artifacts\obj\win-x86.Release\corehost\apphost\standalone\apphost.pdb

kernel32

FindNextFileW GetCurrentProcess GetModuleHandleExW GetModuleFileNameW LeaveCriticalSection InitializeCriticalSection GetEnvironmentVariableW FindClose MultiByteToWideChar GetLastError GetFileAttributesExW GetFullPathNameW GetProcAddress DeleteCriticalSection WideCharToMultiByte IsWow64Process LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc EnterCriticalSection FindFirstFileExW OutputDebugStringW LoadLibraryA GetModuleHandleW InitializeCriticalSectionAndSpinCount SetLastError RaiseException RtlUnwind InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx GetStringTypeW

user32

MessageBoxW

shell32

ShellExecuteW

advapi32

RegOpenKeyExW RegGetValueW DeregisterEventSource RegisterEventSourceW ReportEventW RegCloseKey

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _seh_filter_exe terminate _set_app_type _controlfp_s _invalid_parameter_noinfo_noreturn _exit _register_thread_local_exe_atexit_callback _initialize_onexit_table exit __p___argc __p___wargv _errno _c_exit _cexit abort _initterm_e _initterm _get_initial_wide_environment _initialize_wide_environment _configure_wide_argv _register_onexit_function

api-ms-win-crt-stdio-l1-1-0

__p__commode __acrt_iob_func fputwc fputws __stdio_common_vsprintf_s fflush __stdio_common_vfwprintf __stdio_common_vswprintf _wfopen setvbuf _set_fmode

api-ms-win-crt-heap-l1-1-0

_set_new_mode _callnewh free malloc calloc

api-ms-win-crt-string-l1-1-0

strcpy_s strcspn wcsncmp toupper wcsnlen _wcsdup

api-ms-win-crt-convert-l1-1-0

_wtoi wcstoul

api-ms-win-crt-locale-l1-1-0

_configthreadlocale _lock_locales ___lc_locale_name_func ___mb_cur_max_func ___lc_codepage_func __pctype_func setlocale _unlock_locales localeconv

api-ms-win-crt-math-l1-1-0

frexp __setusermatherr

api-ms-win-crt-time-l1-1-0

_gmtime64_s wcsftime _time64

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-10_a5e4a272185c9478475f11078bbf9fea_amadey_elex_hellokitty

kernel32

user32

shell32

advapi32

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

generic