General
- Target 2026-08-07_56f47cd6f560ac4758beaabbdf990ff8_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat
- Size 205KB
- Sample260808-bqds3sfl3w
- SHA256 bcff92c0850e57cf950cc1a79efb88277e63186d9eb1d836f7089708cdaedc6f
- MD5 56f47cd6f560ac4758beaabbdf990ff8
- SHA1 07724b5fd78b6d4695d648f477cf72cd942fca34
- SHA512 d8f7e63b60a3dc3b94f2ec4f0854ece28d5a8d143acf8d032e43e209cf24eca605d3f543d818dd8d8b53ecac494b44a0cd6af26fab8020a3af85dbd3a4b1e9f9
- SSDEEP 3072:pOkuJVLbUgc0FNYSIn5isiQwwJ/30FMgt3TfC0HsHvqRp9+xsJP+FTiFe:xuJZU90F6UsLJ/306Sj60Hv+KJai4
- TLSH T1AC249E22B6D184B3EA73093019F49B719A3DFC715F2449EF639427AA5E702C09A3D763
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_56f47cd6f560ac4758beaabbdf990ff8_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_56f47cd6f560ac4758beaabbdf990ff8_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat
- Size 205KB
- SHA256 bcff92c0850e57cf950cc1a79efb88277e63186d9eb1d836f7089708cdaedc6f
- MD5 56f47cd6f560ac4758beaabbdf990ff8
- SHA1 07724b5fd78b6d4695d648f477cf72cd942fca34
- SHA512 d8f7e63b60a3dc3b94f2ec4f0854ece28d5a8d143acf8d032e43e209cf24eca605d3f543d818dd8d8b53ecac494b44a0cd6af26fab8020a3af85dbd3a4b1e9f9
- SSDEEP 3072:pOkuJVLbUgc0FNYSIn5isiQwwJ/30FMgt3TfC0HsHvqRp9+xsJP+FTiFe:xuJZU90F6UsLJ/306Sj60Hv+KJai4
- TLSH T1AC249E22B6D184B3EA73093019F49B719A3DFC715F2449EF639427AA5E702C09A3D763
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.