General
- Target 2026-08-02_58cfb8a28ac9be557ee4b03284dbcd62_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader
- Size 962KB
- Sample260802-rrwchsbp9v
- SHA256 a830ed9d50e73eced4760143379b0dd99877de3162f39bf8b15c60c9383421c2
- MD5 58cfb8a28ac9be557ee4b03284dbcd62
- SHA1 6c16d4728f6ff8faadd2ab6c2842f099c29b94c6
- SHA512 4d70a8072fde53f9ab345fc435cf15c55eb7dc6632178560904b5e63b054feb37ea20ccd291ba9bf2cd22b512e0b51a657e202159d8c248cdd1920a2e35e4d2f
- SSDEEP 12288:lN4fGjM8LjBTqKObM/lj1FFD282DsYZnPX542J17agcSLM74kNZQczUB2R77yll1:tMw8KH/B1FFD28ss1818AKA5anI
- TLSH T1E9255A22A3F29232F82730B055AB6939A55DED240B44E5DFE7D0BC613E312C2F676359
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_58cfb8a28ac9be557ee4b03284dbcd62_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackload.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_58cfb8a28ac9be557ee4b03284dbcd62_amadey_cobalt-strike_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader
- Size 962KB
- SHA256 a830ed9d50e73eced4760143379b0dd99877de3162f39bf8b15c60c9383421c2
- MD5 58cfb8a28ac9be557ee4b03284dbcd62
- SHA1 6c16d4728f6ff8faadd2ab6c2842f099c29b94c6
- SHA512 4d70a8072fde53f9ab345fc435cf15c55eb7dc6632178560904b5e63b054feb37ea20ccd291ba9bf2cd22b512e0b51a657e202159d8c248cdd1920a2e35e4d2f
- SSDEEP 12288:lN4fGjM8LjBTqKObM/lj1FFD282DsYZnPX542J17agcSLM74kNZQczUB2R77yll1:tMw8KH/B1FFD28ss1818AKA5anI
- TLSH T1E9255A22A3F29232F82730B055AB6939A55DED240B44E5DFE7D0BC613E312C2F676359
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory