General
- Target 2026-08-10_3f8565eacd24f6647be039a562334ab9_amadey_cloudeye_cobalt-strike_elex_hellokitty_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_smoke-loader_vidar
- Size 1.8MB
- Sample260810-2l2mfsvyht
- SHA256 1674e05aed4a61b47092dfc4f2041f0fd19906cbe53cae02831335d57e6380de
- MD5 3f8565eacd24f6647be039a562334ab9
- SHA1 0995369cb97e31714559e7f52a1920ba082ecb19
- SHA512 68279386369d428f31e7e87a9fa97eb571215b8880c722edb31d3461adb2fe5a7edd28fc1ea17014dee14d7005a517fa008bec348ad6d7b0256685f254adc4e5
- SSDEEP 24576:IGTjSw8KH/B1Tjsznhmb7tTuRWFsronbEqa6+GG8yKrO4cF:IGT2K51T48PtTToonbXaIHy5t
- TLSH T175958E16B79090B5D46EC53089658736AB72FC961F619ADF1380B36C2E337E06F3931A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-10_3f8565eacd24f6647be039a562334ab9_amadey_cloudeye_cobalt-strike_elex_hellokitty_hijackload.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_3f8565eacd24f6647be039a562334ab9_amadey_cloudeye_cobalt-strike_elex_hellokitty_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_smoke-loader_vidar
- Size 1.8MB
- SHA256 1674e05aed4a61b47092dfc4f2041f0fd19906cbe53cae02831335d57e6380de
- MD5 3f8565eacd24f6647be039a562334ab9
- SHA1 0995369cb97e31714559e7f52a1920ba082ecb19
- SHA512 68279386369d428f31e7e87a9fa97eb571215b8880c722edb31d3461adb2fe5a7edd28fc1ea17014dee14d7005a517fa008bec348ad6d7b0256685f254adc4e5
- SSDEEP 24576:IGTjSw8KH/B1Tjsznhmb7tTuRWFsronbEqa6+GG8yKrO4cF:IGT2K51T48PtTToonbXaIHy5t
- TLSH T175958E16B79090B5D46EC53089658736AB72FC961F619ADF1380B36C2E337E06F3931A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Shodi worm
-
Executes dropped EXE
-
Drops file in System32 directory