General
- Target 2026-07-18_c0312058bcea31ac0460ebe1679ef5aa_amadey_cobalt-strike_elex_hellokitty_luca-stealer_lynx_njrat
- Size 675KB
- Sample260718-t78c5aa18t
- SHA256 e59cf1f26fbf532a100f6e831b0c5c018c9c501728c0bd1aba9efdd4a5f57a89
- MD5 c0312058bcea31ac0460ebe1679ef5aa
- SHA1 cf4567fef49ffba227cb4c27ecf69cb23330015c
- SHA512 1395932b4b3b38883f79ec9c958d275ecf49d3ffb0b8f975a0987738563112e286ea7b85f2231faca8b65011a0748a35242c86e46d565e37ab0671acca1095de
- SSDEEP 12288:O8KMieB4G6j/DJ8ZYuU3FoxyowzKM5NJw310ghR/sVlE2wGfDPNo6b7rMqhIr:O9MieBuDI1xyowzRNpgEQGTRPrlhk
- TLSH T1D2E4121A35C181B2F87319310578C2B1893DFC346F51E95F32A539675E78AD0CA3AE6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_c0312058bcea31ac0460ebe1679ef5aa_amadey_cobalt-strike_elex_hellokitty_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_c0312058bcea31ac0460ebe1679ef5aa_amadey_cobalt-strike_elex_hellokitty_luca-stealer_lynx_njrat
- Size 675KB
- SHA256 e59cf1f26fbf532a100f6e831b0c5c018c9c501728c0bd1aba9efdd4a5f57a89
- MD5 c0312058bcea31ac0460ebe1679ef5aa
- SHA1 cf4567fef49ffba227cb4c27ecf69cb23330015c
- SHA512 1395932b4b3b38883f79ec9c958d275ecf49d3ffb0b8f975a0987738563112e286ea7b85f2231faca8b65011a0748a35242c86e46d565e37ab0671acca1095de
- SSDEEP 12288:O8KMieB4G6j/DJ8ZYuU3FoxyowzKM5NJw310ghR/sVlE2wGfDPNo6b7rMqhIr:O9MieBuDI1xyowzRNpgEQGTRPrlhk
- TLSH T1D2E4121A35C181B2F87319310578C2B1893DFC346F51E95F32A539675E78AD0CA3AE6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1