General
- Target 2026-07-23_c153d4ca3df2540f2525a3d34eb06f5b_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_swisyn
- Size 315KB
- Sample260723-bgph8atxew
- SHA256 092af5832f8da2b40b3792291e926bd5e7c0a7334806dff28e64ff842964c40a
- MD5 c153d4ca3df2540f2525a3d34eb06f5b
- SHA1 e61e2606e622192f30a6cdb07da3e27c3b2eda97
- SHA512 74f5fcfa1b0387146bcc8f7121c165ffcd7fc1087952657f77d8e66eddce59205798fb069d92654af2845863dda84c91dbe83f7e779512aa9db9af75d8603c1a
- SSDEEP 6144:XsLqdufVUNDaWNc34EI1hoJikiIkP51uMyvRo9Z:cFUNDaL34EI1hoJOqSZ
- TLSH T172647C127ED84036E4775AB018B8D27A7939BD313F70CD4F23656A195A31B83BA7072B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_c153d4ca3df2540f2525a3d34eb06f5b_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_swisyn.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_c153d4ca3df2540f2525a3d34eb06f5b_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_swisyn.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_c153d4ca3df2540f2525a3d34eb06f5b_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_swisyn
- Size 315KB
- SHA256 092af5832f8da2b40b3792291e926bd5e7c0a7334806dff28e64ff842964c40a
- MD5 c153d4ca3df2540f2525a3d34eb06f5b
- SHA1 e61e2606e622192f30a6cdb07da3e27c3b2eda97
- SHA512 74f5fcfa1b0387146bcc8f7121c165ffcd7fc1087952657f77d8e66eddce59205798fb069d92654af2845863dda84c91dbe83f7e779512aa9db9af75d8603c1a
- SSDEEP 6144:XsLqdufVUNDaWNc34EI1hoJikiIkP51uMyvRo9Z:cFUNDaL34EI1hoJOqSZ
- TLSH T172647C127ED84036E4775AB018B8D27A7939BD313F70CD4F23656A195A31B83BA7072B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory