General
- Target 2026-07-30_2f03e2847b2c5863b80dbcd0f9516a0a_amadey_cobalt-strike_elex_hellokitty_luca-stealer_lynx_njrat
- Size 679KB
- Sample260730-wkq7fadr7v
- SHA256 ea7f45c2aebc136a0b2f9fa39ddd7d1679de0beebded4eb1eab5f3519e676a0b
- MD5 2f03e2847b2c5863b80dbcd0f9516a0a
- SHA1 8c7174092d57a84755bb1b1856d0d4680a037907
- SHA512 8b09b84ded3a3de3dd4bef9837e872ad01dc7e6ba9a301b9d32778e4a4a0ac3a2611cb6f4efce58c483493d2247bbf1f5b45188a8638c62d4cdb25ef01a8ddbd
- SSDEEP 12288:QZmdbex673tM6hct28uP18WR/FW2Gb8JTCMMK7LIFYJ1WroCrwah4:Quex636mctvE/BT76+1NCE
- TLSH T109E4120174C280B2DAB71A710560E3B1DA7CFEB02D951DD773550A7F9F302D29A2AE6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_2f03e2847b2c5863b80dbcd0f9516a0a_amadey_cobalt-strike_elex_hellokitty_luca-stealer_lynx_njrat.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_2f03e2847b2c5863b80dbcd0f9516a0a_amadey_cobalt-strike_elex_hellokitty_luca-stealer_lynx_njrat
- Size 679KB
- SHA256 ea7f45c2aebc136a0b2f9fa39ddd7d1679de0beebded4eb1eab5f3519e676a0b
- MD5 2f03e2847b2c5863b80dbcd0f9516a0a
- SHA1 8c7174092d57a84755bb1b1856d0d4680a037907
- SHA512 8b09b84ded3a3de3dd4bef9837e872ad01dc7e6ba9a301b9d32778e4a4a0ac3a2611cb6f4efce58c483493d2247bbf1f5b45188a8638c62d4cdb25ef01a8ddbd
- SSDEEP 12288:QZmdbex673tM6hct28uP18WR/FW2Gb8JTCMMK7LIFYJ1WroCrwah4:Quex636mctvE/BT76+1NCE
- TLSH T109E4120174C280B2DAB71A710560E3B1DA7CFEB02D951DD773550A7F9F302D29A2AE6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1