General
- Target 2026-07-17_87de8b16396c8fadc8cfe651ad5a5009_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_remcos_vidar
- Size 852KB
- Sample260717-jm8haaex2p
- SHA256 f8f8f366083ef6c2cd09598e656438d5c7c6b5acf1c6622aa75ad88d185731bc
- MD5 87de8b16396c8fadc8cfe651ad5a5009
- SHA1 c2b1562118eea2024fbb5ad72a7c426e1ca75922
- SHA512 adcf4c39228605d2ed7c8f2d4648422ed56dca7ec853d4d30bea62fb8a35c6d14394e2715a51c2b38291d1365af0f6a694b6a852eed4b7cea862ea303fb4d5e6
- SSDEEP 12288:uw532+RWPzrlO91bKQofLLeVf9GA8VmU4EFHLTUOsGxOBlyO1UdWXkz:XRazrU3KQGWVfVR38PUp8cydWXkz
- TLSH T13E059E01B6D080B6E4B7993589A48671DAB9FD300B318FDF1394566A1F317E0AE39F63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_87de8b16396c8fadc8cfe651ad5a5009_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_87de8b16396c8fadc8cfe651ad5a5009_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_87de8b16396c8fadc8cfe651ad5a5009_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_remcos_vidar
- Size 852KB
- SHA256 f8f8f366083ef6c2cd09598e656438d5c7c6b5acf1c6622aa75ad88d185731bc
- MD5 87de8b16396c8fadc8cfe651ad5a5009
- SHA1 c2b1562118eea2024fbb5ad72a7c426e1ca75922
- SHA512 adcf4c39228605d2ed7c8f2d4648422ed56dca7ec853d4d30bea62fb8a35c6d14394e2715a51c2b38291d1365af0f6a694b6a852eed4b7cea862ea303fb4d5e6
- SSDEEP 12288:uw532+RWPzrlO91bKQofLLeVf9GA8VmU4EFHLTUOsGxOBlyO1UdWXkz:XRazrU3KQGWVfVR38PUp8cydWXkz
- TLSH T13E059E01B6D080B6E4B7993589A48671DAB9FD300B318FDF1394566A1F317E0AE39F63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory