General
- Target 2026-07-31_a4e5338ba7d5c44d80654e90a21b1f3b_amadey_cobalt-strike_darkgate_hellokitty_icedid_luca-stealer_njrat_satacom_smoke-loader_stealc_vidar
- Size 1.7MB
- Sample260731-3e4c5san9v
- SHA256 2ef11fe137584a32393063721f04ec376daa4dcb741e84468efb83dd8f6a9436
- MD5 a4e5338ba7d5c44d80654e90a21b1f3b
- SHA1 dd4e2dc81465923a5c361815b157d84701c943a3
- SHA512 31bc2b4f157a5d3c95df2f7f31306600bbc8bb1146af27d4e21df630ca4cae2e691662e78cf30ef34559ff6548f0123fe026a66203bdf81a97a529d5491f35a4
- SSDEEP 49152:1cfs0odYlINLYlINeB4d91X/CVdVojlThuy+:UspdxtxQB4AdVojruB
- TLSH T110850202F6D440F5E1B792388CB28656DA7ABC2A0760D7CF13E856661F336D09E3D762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-31_a4e5338ba7d5c44d80654e90a21b1f3b_amadey_cobalt-strike_darkgate_hellokitty_icedid_luca-ste.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_a4e5338ba7d5c44d80654e90a21b1f3b_amadey_cobalt-strike_darkgate_hellokitty_icedid_luca-ste.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_a4e5338ba7d5c44d80654e90a21b1f3b_amadey_cobalt-strike_darkgate_hellokitty_icedid_luca-stealer_njrat_satacom_smoke-loader_stealc_vidar
- Size 1.7MB
- SHA256 2ef11fe137584a32393063721f04ec376daa4dcb741e84468efb83dd8f6a9436
- MD5 a4e5338ba7d5c44d80654e90a21b1f3b
- SHA1 dd4e2dc81465923a5c361815b157d84701c943a3
- SHA512 31bc2b4f157a5d3c95df2f7f31306600bbc8bb1146af27d4e21df630ca4cae2e691662e78cf30ef34559ff6548f0123fe026a66203bdf81a97a529d5491f35a4
- SSDEEP 49152:1cfs0odYlINLYlINeB4d91X/CVdVojlThuy+:UspdxtxQB4AdVojruB
- TLSH T110850202F6D440F5E1B792388CB28656DA7ABC2A0760D7CF13E856661F336D09E3D762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.