General
- Target 2026-07-23_13be9abbe57ef29c76872838d1e1df82_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_swisyn
- Size 333KB
- Sample260723-bs993aeg83
- SHA256 f6e203585cedafebed25acfae44760dbc6b48a3788574e64103408d3cde51054
- MD5 13be9abbe57ef29c76872838d1e1df82
- SHA1 00763857e5d2fa820606aeb28253b116bae6c6c4
- SHA512 5fdf8ef5b2f3d9c71f8c22b739647ac140cfb5c55c7375c8dac60c394bb6a1495e57c5f2e5c6bafbb5fbd09d3c5cf83d06021f1bfc28c7e0413e67a927104da5
- SSDEEP 6144:XsLqdufVUNDandP4BjYVeTfjF/r8x3GlDnpCaO0Mxn:cFUNDaN4lOmfjF/CiVYn
- TLSH T1A7746C26B6904836D87359B028F4D6367A397D310F70DC8F6795AB291E70683B6F072B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_13be9abbe57ef29c76872838d1e1df82_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_swisyn.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_13be9abbe57ef29c76872838d1e1df82_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_swisyn.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_13be9abbe57ef29c76872838d1e1df82_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_swisyn
- Size 333KB
- SHA256 f6e203585cedafebed25acfae44760dbc6b48a3788574e64103408d3cde51054
- MD5 13be9abbe57ef29c76872838d1e1df82
- SHA1 00763857e5d2fa820606aeb28253b116bae6c6c4
- SHA512 5fdf8ef5b2f3d9c71f8c22b739647ac140cfb5c55c7375c8dac60c394bb6a1495e57c5f2e5c6bafbb5fbd09d3c5cf83d06021f1bfc28c7e0413e67a927104da5
- SSDEEP 6144:XsLqdufVUNDandP4BjYVeTfjF/r8x3GlDnpCaO0Mxn:cFUNDaN4lOmfjF/CiVYn
- TLSH T1A7746C26B6904836D87359B028F4D6367A397D310F70DC8F6795AB291E70683B6F072B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory