2026-07-21_93eee90e7d59bccb2716616ef0ed6849_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat

General

Target
2026-07-21_93eee90e7d59bccb2716616ef0ed6849_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat
Size 121KB
Sample260721-bpswlsbs9n
SHA256 e156e786d313c7c996dafe043db8e047572a64b198de40ddadc7755600c62743
MD5 93eee90e7d59bccb2716616ef0ed6849
SHA1 cfc041b42215b3e173c614d47c42d325dfe4dd81
SHA512 e1d62c4e6223254cb035c611fdbe4e767eafd74a4d72177fada9e31ee8671134508b88f5e1a591750d820a46a0875372cf3438255d7c00b60d52b50c4632be03
SSDEEP 3072:eA7kbyOF7AQZqb9VO1n8Sm2WZRoBVXmq2KDQb0oOTrt1/DzP0dA:rkdAQEHE8z2QoB9zsooCttb0a
TLSH
T1EBC38D42B5C1C471D8B529350968DBB58A3DFD700F24AEDB63C816B69F342C0DA35EAB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-21_93eee90e7d59bccb2716616ef0ed6849_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat

File Explorer

2026-07-21_93eee90e7d59bccb2716616ef0ed6849_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat

.exe 121KB

2026-07-21_93eee90e7d59bccb2716616ef0ed6849_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat

IMPHASH 451f8d791484ec5ebc48e36e13359c10
SHA256 e156e786d313c7c996dafe043db8e047572a64b198de40ddadc7755600c62743
MD5 93eee90e7d59bccb2716616ef0ed6849
SHA1 cfc041b42215b3e173c614d47c42d325dfe4dd81
SHA512 e1d62c4e6223254cb035c611fdbe4e767eafd74a4d72177fada9e31ee8671134508b88f5e1a591750d820a46a0875372cf3438255d7c00b60d52b50c4632be03
SSDEEP 3072:eA7kbyOF7AQZqb9VO1n8Sm2WZRoBVXmq2KDQb0oOTrt1/DzP0dA:rkdAQEHE8z2QoB9zsooCttb0a
TLSH
T1EBC38D42B5C1C471D8B529350968DBB58A3DFD700F24AEDB63C816B69F342C0DA35EAB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6914

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA GetFileAttributesA CloseHandle WaitForSingleObject Sleep CreateRemoteThread GetExitCodeThread OpenProcess VirtualAllocEx WriteProcessMemory MapViewOfFile VirtualFreeEx UnmapViewOfFile GetModuleFileNameA GetModuleHandleA GetProcAddress CreateFileMappingA CreateToolhelp32Snapshot Process32First Process32Next K32EnumProcessModules K32GetModuleFileNameExA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW WriteConsoleW RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx HeapSize HeapReAlloc CreateFileW DecodePointer

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-21_93eee90e7d59bccb2716616ef0ed6849_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat

kernel32

generic