General
- Target 2026-07-12_fab84a761d1dc9897ecb9df3008bbee1_amadey_cobalt-strike_elex_glassworm_hellokitty_luca-stealer_njrat_remcos_vidar
- Size 4.4MB
- Sample260712-mte14aas4z
- SHA256 5f7e6b1af7d210043e3753d6937e4e090a970afcc6f2a10abb3c83f86a5ffd1c
- MD5 fab84a761d1dc9897ecb9df3008bbee1
- SHA1 a57bea86b8ac9a81fdd471e22eeaa5d3f81672cf
- SHA512 0c211b42b793a9cbe7cd78a57f1231805400b536f81b0b588038d6e4e5371b100f6aaa151e824a515b132ee10521c5aaecfb6bddd98514459e88cab99d29083c
- SSDEEP 49152:BmrU3KyV18yN/KCGZd0qgNEf16lhulJLirHJIZ/K0tDAy49uO7G6XSq4vPMgVRWR:BhV1ZOWQtZ/K0tGOPXRWXrUuL2UgG
- TLSH T14F26AE13F6D400B9E06AD17AC7669736EA7278491B30A6DF03A09B562F33BF05B39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_fab84a761d1dc9897ecb9df3008bbee1_amadey_cobalt-strike_elex_glassworm_hellokitty_luca-stealer_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_fab84a761d1dc9897ecb9df3008bbee1_amadey_cobalt-strike_elex_glassworm_hellokitty_luca-stealer_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_fab84a761d1dc9897ecb9df3008bbee1_amadey_cobalt-strike_elex_glassworm_hellokitty_luca-stealer_njrat_remcos_vidar
- Size 4.4MB
- SHA256 5f7e6b1af7d210043e3753d6937e4e090a970afcc6f2a10abb3c83f86a5ffd1c
- MD5 fab84a761d1dc9897ecb9df3008bbee1
- SHA1 a57bea86b8ac9a81fdd471e22eeaa5d3f81672cf
- SHA512 0c211b42b793a9cbe7cd78a57f1231805400b536f81b0b588038d6e4e5371b100f6aaa151e824a515b132ee10521c5aaecfb6bddd98514459e88cab99d29083c
- SSDEEP 49152:BmrU3KyV18yN/KCGZd0qgNEf16lhulJLirHJIZ/K0tDAy49uO7G6XSq4vPMgVRWR:BhV1ZOWQtZ/K0tGOPXRWXrUuL2UgG
- TLSH T14F26AE13F6D400B9E06AD17AC7669736EA7278491B30A6DF03A09B562F33BF05B39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory