General
- Target 2026-07-17_7f049f88045b32d349f7b7ef5acaea03_amadey_cloudeye_cobalt-strike_elex_hellokitty_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_smoke-loader_vidar
- Size 2.0MB
- Sample260717-16282sbt51
- SHA256 e7ad4e46d02e820426c5aeb6e313d176ef3fb89adfbc3ecd08a339674c05ee5d
- MD5 7f049f88045b32d349f7b7ef5acaea03
- SHA1 0ac6b7fee5276506963024313280899bbcec59a7
- SHA512 35a498ffba833d17e0a9afbc97b034ae3b0190307911a62c4d4c499cca31a3f5b4f4f3580c0a224d8d17c51ee8fe4b5ea943d67a8add818cc4f6d268f6ee7980
- SSDEEP 24576:IGTjSw8KH/B/gjI45bl9Mbonwap41+zzPTThwv3EJy:IGT2K5/gjI45TMwwapIgTC
- TLSH T154A5F62271E204AAC69D9031DF16873597D17C7D8FF193F7B24572C92B729C07A3AA0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-17_7f049f88045b32d349f7b7ef5acaea03_amadey_cloudeye_cobalt-strike_elex_hellokitty_hijackload.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_7f049f88045b32d349f7b7ef5acaea03_amadey_cloudeye_cobalt-strike_elex_hellokitty_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_smoke-loader_vidar
- Size 2.0MB
- SHA256 e7ad4e46d02e820426c5aeb6e313d176ef3fb89adfbc3ecd08a339674c05ee5d
- MD5 7f049f88045b32d349f7b7ef5acaea03
- SHA1 0ac6b7fee5276506963024313280899bbcec59a7
- SHA512 35a498ffba833d17e0a9afbc97b034ae3b0190307911a62c4d4c499cca31a3f5b4f4f3580c0a224d8d17c51ee8fe4b5ea943d67a8add818cc4f6d268f6ee7980
- SSDEEP 24576:IGTjSw8KH/B/gjI45bl9Mbonwap41+zzPTThwv3EJy:IGT2K5/gjI45TMwwapIgTC
- TLSH T154A5F62271E204AAC69D9031DF16873597D17C7D8FF193F7B24572C92B729C07A3AA0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects Shodi worm
Executes dropped EXE
Drops file in System32 directory