General
- Target 2026-08-05_90584a16c349f5f3a6a4cec89c535c85_amadey_cloudeye_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
- Size 758KB
- Sample260805-wlcensdk7t
- SHA256 164795c58375b0f223b8f13137396936530627f53fe885f5f727c89d7f79927b
- MD5 90584a16c349f5f3a6a4cec89c535c85
- SHA1 7186c59666e84e045df07203b8e32a3dc3b35f2e
- SHA512 fe68b374e5f83c5c4ff4ab4ed93421696e34246df1e1016e0ea1af0d2492739b96b0874b7397d5152ba7d8fb984b827bba0eeb73d8f672343f2a2171d0e8b4fd
- SSDEEP 12288:DG8LjBTqKObM/lj1FBghDXZmdgF0RQU8osGLTzUjD5FZ9oU5DO69W:DGw8KH/B1FBgDXZNFfZoDTK7pW
- TLSH T13DF4D0027BD0C072E5B70A301875C776AB3EFD311EA19B0B6344775D6E31682DA3AB5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_90584a16c349f5f3a6a4cec89c535c85_amadey_cloudeye_cobalt-strike_elex_hellokitty_hijackload.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_90584a16c349f5f3a6a4cec89c535c85_amadey_cloudeye_cobalt-strike_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
- Size 758KB
- SHA256 164795c58375b0f223b8f13137396936530627f53fe885f5f727c89d7f79927b
- MD5 90584a16c349f5f3a6a4cec89c535c85
- SHA1 7186c59666e84e045df07203b8e32a3dc3b35f2e
- SHA512 fe68b374e5f83c5c4ff4ab4ed93421696e34246df1e1016e0ea1af0d2492739b96b0874b7397d5152ba7d8fb984b827bba0eeb73d8f672343f2a2171d0e8b4fd
- SSDEEP 12288:DG8LjBTqKObM/lj1FBghDXZmdgF0RQU8osGLTzUjD5FZ9oU5DO69W:DGw8KH/B1FBgDXZNFfZoDTK7pW
- TLSH T13DF4D0027BD0C072E5B70A301875C776AB3EFD311EA19B0B6344775D6E31682DA3AB5A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory