General
- Target 2026-07-23_3dd231b3f7313a421482f3d6ef79d069_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_smoke-loader_swisyn
- Size 516KB
- Sample260723-bq2j5styfz
- SHA256 e0245ea6b6b9bfdf62e40499d21f6069b7f73ce055d72e7d06ed5f30325a05b9
- MD5 3dd231b3f7313a421482f3d6ef79d069
- SHA1 6ef72f512e94493efcbdb210610c93a6184b63b1
- SHA512 da8ffb37e983a96f64ea853c5d89124b6dd49b9aefb0bd3f8042ee9e65c5115354c8248819002330d8eebd13ccbbb9ec56bae44ad62b3ad5a2b8a705f375611b
- SSDEEP 6144:XsLqdufVUNDanMCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCY:cFUNDa5Z0eJM6rDz2CaKCE1IZwIYY
- TLSH T1B4B47D1276E08832E4B31A7018B4D6797A3EBD310F30DD5F639457691E71782AAF1B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_3dd231b3f7313a421482f3d6ef79d069_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_smoke-loader_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_3dd231b3f7313a421482f3d6ef79d069_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_smoke-loader_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_3dd231b3f7313a421482f3d6ef79d069_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_smoke-loader_swisyn
- Size 516KB
- SHA256 e0245ea6b6b9bfdf62e40499d21f6069b7f73ce055d72e7d06ed5f30325a05b9
- MD5 3dd231b3f7313a421482f3d6ef79d069
- SHA1 6ef72f512e94493efcbdb210610c93a6184b63b1
- SHA512 da8ffb37e983a96f64ea853c5d89124b6dd49b9aefb0bd3f8042ee9e65c5115354c8248819002330d8eebd13ccbbb9ec56bae44ad62b3ad5a2b8a705f375611b
- SSDEEP 6144:XsLqdufVUNDanMCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCY:cFUNDa5Z0eJM6rDz2CaKCE1IZwIYY
- TLSH T1B4B47D1276E08832E4B31A7018B4D6797A3EBD310F30DD5F639457691E71782AAF1B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory