General
- Target 2026-07-23_28195d0b77325e2cb6b1baedbad77f4c_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_smoke-loader_swisyn
- Size 519KB
- Sample260723-br661sck91
- SHA256 c3dfc0d77bece889651b2a39c3591a7cf86e2fb17e1b80030e4b00a2360ef77e
- MD5 28195d0b77325e2cb6b1baedbad77f4c
- SHA1 3966c4e4f97f6ef6f97c19959661625253ad0699
- SHA512 f3022d603687076eff7e06410e1432d4bbba5fff07a8c05f283b7524d9cf34db13b8c29b32b33841a1c49775b28033702703cbd152bc4d397d10d232fb56292f
- SSDEEP 6144:XsLqdufVUNDanQ/M1xPjrG1x+YgoglDni32wAO5GeLCfCsip9631L5qMbYdf:cFUNDa93PG1x+1+pBLCfCjGNqGYt
- TLSH T1C2B47D2275E04832E4B32A7018B4D7756E3EBD310F71DD5F639467691E31782AAB0B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_28195d0b77325e2cb6b1baedbad77f4c_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_smoke-loader_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_28195d0b77325e2cb6b1baedbad77f4c_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_smoke-loader_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_28195d0b77325e2cb6b1baedbad77f4c_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_smoke-loader_swisyn
- Size 519KB
- SHA256 c3dfc0d77bece889651b2a39c3591a7cf86e2fb17e1b80030e4b00a2360ef77e
- MD5 28195d0b77325e2cb6b1baedbad77f4c
- SHA1 3966c4e4f97f6ef6f97c19959661625253ad0699
- SHA512 f3022d603687076eff7e06410e1432d4bbba5fff07a8c05f283b7524d9cf34db13b8c29b32b33841a1c49775b28033702703cbd152bc4d397d10d232fb56292f
- SSDEEP 6144:XsLqdufVUNDanQ/M1xPjrG1x+YgoglDni32wAO5GeLCfCsip9631L5qMbYdf:cFUNDa93PG1x+1+pBLCfCjGNqGYt
- TLSH T1C2B47D2275E04832E4B32A7018B4D7756E3EBD310F71DD5F639467691E31782AAB0B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory