General
- Target 2026-07-30_94640afe42e7e7a0d46a3d6eed26ce93_amadey_cloudeye_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
- Size 536KB
- Sample260730-vvrqaawyes
- SHA256 82dd2f474aef3e434b3d30ab1302fc0e93bff1d145228f28d8dcab0f3e39505b
- MD5 94640afe42e7e7a0d46a3d6eed26ce93
- SHA1 57f4e9a743ba80a6098afbfe9b9a24031d2e7879
- SHA512 3ad6b88f5695bdbf5737568594ea263b1ba5153bf7e1198b2a744c096f8f7ba094c9d17e9edab205c3f5f45d24369e354eeee6ecea19c8a2e8ffe87150a37d5c
- SSDEEP 12288:pG8LjBTqKObM/lj1FBghDXGTzUjD5FZ9oU5DO69T:pGw8KH/B1FBgDXGTK7pT
- TLSH T1CEC4CF02BBD0C472E4760A302875CB71AF7EFC351E909B4B6344776DAE317819E26B5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_94640afe42e7e7a0d46a3d6eed26ce93_amadey_cloudeye_cobalt-strike_elex_hellokitty_hijackload.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_94640afe42e7e7a0d46a3d6eed26ce93_amadey_cloudeye_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
- Size 536KB
- SHA256 82dd2f474aef3e434b3d30ab1302fc0e93bff1d145228f28d8dcab0f3e39505b
- MD5 94640afe42e7e7a0d46a3d6eed26ce93
- SHA1 57f4e9a743ba80a6098afbfe9b9a24031d2e7879
- SHA512 3ad6b88f5695bdbf5737568594ea263b1ba5153bf7e1198b2a744c096f8f7ba094c9d17e9edab205c3f5f45d24369e354eeee6ecea19c8a2e8ffe87150a37d5c
- SSDEEP 12288:pG8LjBTqKObM/lj1FBghDXGTzUjD5FZ9oU5DO69T:pGw8KH/B1FBgDXGTK7pT
- TLSH T1CEC4CF02BBD0C472E4760A302875CB71AF7EFC351E909B4B6344776DAE317819E26B5A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory