General
- Target 2026-08-02_b91ac3f7bdb3a6d334cccfdf43ba8276_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play
- Size 562KB
- Sample260802-m1d3dax1dy
- SHA256 69ec80984e2592a854b1fd7b860e617d38a081b50fd43a55c5d201a4651574bb
- MD5 b91ac3f7bdb3a6d334cccfdf43ba8276
- SHA1 20030a597e1219f16b6fd8eacceeff449ba2e758
- SHA512 8b3e87782816a8f54f8731e31965ce762bcd8ade51f721feb8cc1038cf9521a235733613a4cb7df046220afda293accc2ddc50e7b53dc4d1444d081e963facad
- SSDEEP 12288:tUYJ9EiZE82BdygNz3EiT415pE+m6PKZpN4lwrxuU:GYJ9E+E1+Q0iT41+6Cp4lwg
- TLSH T1BAC4BE2070D0D861C866C33458BCA67A665EF4699BD5FCAFA3AF23FC3D506C40629C5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_b91ac3f7bdb3a6d334cccfdf43ba8276_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_b91ac3f7bdb3a6d334cccfdf43ba8276_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_b91ac3f7bdb3a6d334cccfdf43ba8276_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_play
- Size 562KB
- SHA256 69ec80984e2592a854b1fd7b860e617d38a081b50fd43a55c5d201a4651574bb
- MD5 b91ac3f7bdb3a6d334cccfdf43ba8276
- SHA1 20030a597e1219f16b6fd8eacceeff449ba2e758
- SHA512 8b3e87782816a8f54f8731e31965ce762bcd8ade51f721feb8cc1038cf9521a235733613a4cb7df046220afda293accc2ddc50e7b53dc4d1444d081e963facad
- SSDEEP 12288:tUYJ9EiZE82BdygNz3EiT415pE+m6PKZpN4lwrxuU:GYJ9E+E1+Q0iT41+6Cp4lwg
- TLSH T1BAC4BE2070D0D861C866C33458BCA67A665EF4699BD5FCAFA3AF23FC3D506C40629C5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables taskbar notifications via registry modification
-
Executes dropped EXE
-
Windows security modification
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory