General
- Target 2026-08-09_37388967dc824dbe0e984723537c6587_amadey_cloudeye_elex_hellokitty_hijackloader_nymaim_rhadamanthys_smoke-loader
- Size 2.1MB
- Sample260809-xbyetsbr51
- SHA256 5cd5a89efdd334dc90386f5ecb1e45c73ef741e1cab78356b3277dff1ed81aca
- MD5 37388967dc824dbe0e984723537c6587
- SHA1 87de0d63f9df78f892ecffc058ad3581fdf7eb03
- SHA512 919789a94c6939e3578cb58802909fcac833db1d2a43140939a2748d7c0064d618e91d73b004c51902821b86d844816bc843580003c355994b7f346f9b60d3d6
- SSDEEP 49152:peKybXsPNIV/KCGZd0qgNEf16lhulJLirHJIZ/K0tDAy49uO7G6X0TGpx:gKybXsPNDWQtZ/K0tvGpx
- TLSH T1B9A5AE13F58040E9D00DC0B9976AE632E9367C590B75B5CF1390AB622E37FE1A739B16
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_37388967dc824dbe0e984723537c6587_amadey_cloudeye_elex_hellokitty_hijackloader_nymaim_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_37388967dc824dbe0e984723537c6587_amadey_cloudeye_elex_hellokitty_hijackloader_nymaim_rhadamanthys_smoke-loader
- Size 2.1MB
- SHA256 5cd5a89efdd334dc90386f5ecb1e45c73ef741e1cab78356b3277dff1ed81aca
- MD5 37388967dc824dbe0e984723537c6587
- SHA1 87de0d63f9df78f892ecffc058ad3581fdf7eb03
- SHA512 919789a94c6939e3578cb58802909fcac833db1d2a43140939a2748d7c0064d618e91d73b004c51902821b86d844816bc843580003c355994b7f346f9b60d3d6
- SSDEEP 49152:peKybXsPNIV/KCGZd0qgNEf16lhulJLirHJIZ/K0tDAy49uO7G6X0TGpx:gKybXsPNDWQtZ/K0tvGpx
- TLSH T1B9A5AE13F58040E9D00DC0B9976AE632E9367C590B75B5CF1390AB622E37FE1A739B16
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory