General
- Target 2026-07-21_fa36e8bf707686c9e15ce0e647a9a2d8_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat
- Size 158KB
- Sample260721-3n8dfswape
- SHA256 8ad6c78b99044d06d9e853162e373ed386b9b772cf89dcf43147922d25c3a5b4
- MD5 fa36e8bf707686c9e15ce0e647a9a2d8
- SHA1 f671880ad88a74926cb103bef6f4933f7547dca9
- SHA512 101a88200bc40f448cb571e14b1fd0f661a8143c8875c8d9ad942cc81325bd4676593a4602a662a4446bd4b4a29b9983a72a224a0ea3c1149b388e725f57af4f
- SSDEEP 3072:hXkF3pKSNasKKtMSLj6y6JQ2F5gx+lCcLiG8iQwhO+31BuCG0SRaRqr0bjwG:eFpjVJaSP6RGQ5jlT8QSKqruj3
- TLSH T1E7F39D1135D2C472E4621A3018B8DB725E7DFD301EA49EEF739816390F742C19A39EBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_fa36e8bf707686c9e15ce0e647a9a2d8_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_fa36e8bf707686c9e15ce0e647a9a2d8_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat
- Size 158KB
- SHA256 8ad6c78b99044d06d9e853162e373ed386b9b772cf89dcf43147922d25c3a5b4
- MD5 fa36e8bf707686c9e15ce0e647a9a2d8
- SHA1 f671880ad88a74926cb103bef6f4933f7547dca9
- SHA512 101a88200bc40f448cb571e14b1fd0f661a8143c8875c8d9ad942cc81325bd4676593a4602a662a4446bd4b4a29b9983a72a224a0ea3c1149b388e725f57af4f
- SSDEEP 3072:hXkF3pKSNasKKtMSLj6y6JQ2F5gx+lCcLiG8iQwhO+31BuCG0SRaRqr0bjwG:eFpjVJaSP6RGQ5jlT8QSKqruj3
- TLSH T1E7F39D1135D2C472E4621A3018B8DB725E7DFD301EA49EEF739816390F742C19A39EBA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.