General
- Target 2026-08-06_d814dc3090534233903b173160282e4a_amadey_cobalt-strike_elex_hellokitty
- Size 807KB
- Sample260806-bhqsnsfa63
- SHA256 f0b2e97f86e73be8cf2b12066a14ebb64aa1a6f71a78e48a440d74a2986fde71
- MD5 d814dc3090534233903b173160282e4a
- SHA1 509146316fbeab19ecc29bb6e26176b7cf2cd12c
- SHA512 74914c8d8270ad5096fa0d737e2250bd85a82220ced463046a8bd633ebe32bc9e650831f6e390248dff4d1f5a299f5d126424567394f3344be3088e546f8bc1c
- SSDEEP 24576:tmxeKjzE8LFO6S3Phz2bzOtn93/Z4MaY1YEcFA:tuhPHFahz8U59P0A
- TLSH T1FC052250F5E6D520DA67883125A4C574CE3EED310FA249EF278425766E342E09A32BFF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_d814dc3090534233903b173160282e4a_amadey_cobalt-strike_elex_hellokitty.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_d814dc3090534233903b173160282e4a_amadey_cobalt-strike_elex_hellokitty.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_d814dc3090534233903b173160282e4a_amadey_cobalt-strike_elex_hellokitty
- Size 807KB
- SHA256 f0b2e97f86e73be8cf2b12066a14ebb64aa1a6f71a78e48a440d74a2986fde71
- MD5 d814dc3090534233903b173160282e4a
- SHA1 509146316fbeab19ecc29bb6e26176b7cf2cd12c
- SHA512 74914c8d8270ad5096fa0d737e2250bd85a82220ced463046a8bd633ebe32bc9e650831f6e390248dff4d1f5a299f5d126424567394f3344be3088e546f8bc1c
- SSDEEP 24576:tmxeKjzE8LFO6S3Phz2bzOtn93/Z4MaY1YEcFA:tuhPHFahz8U59P0A
- TLSH T1FC052250F5E6D520DA67883125A4C574CE3EED310FA249EF278425766E342E09A32BFF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Modifies RDP port number used by Windows
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled