General

  • Target
    2026-08-04_209f02d10e8fae086a3574880fd90804_amadey_cobalt-strike_elex_floxif_hellokitty_luca-stealer_njrat
  • Size 399KB
  • Sample260804-tzxlnavdkf
  • SHA256 66a0a337b89a0d0bc70be622f5a8129a1ddce326121d46b62bb47fd7108fe6fe
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-08-04_209f02d10e8fae086a3574880fd90804_amadey_cobalt-strike_elex_floxif_hellokitty_luca-stealer_njrat
    .exe 399KB

2026-08-04_209f02d10e8fae086a3574880fd90804_amadey_cobalt-strike_elex_floxif_hellokitty_luca-stealer_njrat

  • IMPHASH 19f72e30429683ac5de8d6a39ee8095b
  • SHA256 66a0a337b89a0d0bc70be622f5a8129a1ddce326121d46b62bb47fd7108fe6fe
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
15:ad:ae:59:94:a6:ed:03:1c:25:2e:6d:37:d4:91:b3:40:12:dd:46:01:12:86:c9:ae:b4:d7:d7:1b:2f:9a:67
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=9131012030160721XG,CN=Shanghai Microvirt Software Technology Co.\, Ltd.,O=Shanghai Microvirt Software Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c09e5a589e8b4a4e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

PE Signature issue

Digest
bb:cb:39:76:43:69:10:f6:5c:57:46:b7:1d:2b:11:ff:e7:f4:c6:e7
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=9131012030160721XG,CN=Shanghai Microvirt Software Technology Co.\, Ltd.,O=Shanghai Microvirt Software Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c09e5a589e8b4a4e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Minor OS version
0
Major OS version
6
Entry point
11431
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\workspace\memu-service\Release\MemuService.pdb