General
- Target 2026-07-19_0c04c7d4646eef8078f6b0990aa34655_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat
- Size 165KB
- Sample260720-ca8h7aew5w
- SHA256 6676c14d4f01f86bf3b900e6b00d43aabea17896549c9d86d97d58d20fba96a0
- MD5 0c04c7d4646eef8078f6b0990aa34655
- SHA1 ccab2bc76f39eeb7634d3b8171d14e0cd1616df1
- SHA512 ba07a6ecc38aaac876eff17d6d36cf63cbeba61c08bd99f873434866a07b417611927de3a0ce2a558503c8cf3b940af4fb33b94dc951fe101e988f4db134acc7
- SSDEEP 3072:pNftffjmNg1KzhElR/0A7zlp6+rGJqtnm34Er9Gd0ySIWj1m7O1+4M0:pdVfjmNiK1Ep7zWOGEtn4tod0SWcn90
- TLSH T1D4F3AE01B9C0C472D9B7193148B09F715E7DFD700F609E9B63881A7E9F346C19A2AA7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_0c04c7d4646eef8078f6b0990aa34655_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_0c04c7d4646eef8078f6b0990aa34655_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat
- Size 165KB
- SHA256 6676c14d4f01f86bf3b900e6b00d43aabea17896549c9d86d97d58d20fba96a0
- MD5 0c04c7d4646eef8078f6b0990aa34655
- SHA1 ccab2bc76f39eeb7634d3b8171d14e0cd1616df1
- SHA512 ba07a6ecc38aaac876eff17d6d36cf63cbeba61c08bd99f873434866a07b417611927de3a0ce2a558503c8cf3b940af4fb33b94dc951fe101e988f4db134acc7
- SSDEEP 3072:pNftffjmNg1KzhElR/0A7zlp6+rGJqtnm34Er9Gd0ySIWj1m7O1+4M0:pdVfjmNiK1Ep7zWOGEtn4tod0SWcn90
- TLSH T1D4F3AE01B9C0C472D9B7193148B09F715E7DFD700F609E9B63881A7E9F346C19A2AA7B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.