General
- Target 2026-08-11_db80eb65e63d8c5f77753702aa337d94_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_vidar
- Size 2.1MB
- Sample260811-cpd8wstbrb
- SHA256 1ba752606c144aba0189e7abf2773630246ef78e8e65daf9f047e705aefc360f
- MD5 db80eb65e63d8c5f77753702aa337d94
- SHA1 f92ec091b79493e52af89f1a77faf16670af3617
- SHA512 429c7b7a0e85b6d8b43574b7c296460cfc7a6e1670ee098dd7f58ff4fd2a484e899a85df545fc7c08cfcc989008d13a99bcedb0106d50e34d7406e154fdaf2cb
- SSDEEP 49152:nj9LxcO4Q5YCfeK51rgXteP3Vz9oI2mhoNosVDP+fXoVO8y:njBxcO4EYC2K59sePl9oGoNoswfv/
- TLSH T164A5F112B2814071D87711B1459AEB3BDA34FA2457214BDFE7C4CE24AF72AD16A3D32B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_db80eb65e63d8c5f77753702aa337d94_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloa.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_db80eb65e63d8c5f77753702aa337d94_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloa.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_db80eb65e63d8c5f77753702aa337d94_amadey_cobalt-strike_elex_glassworm_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_vidar
- Size 2.1MB
- SHA256 1ba752606c144aba0189e7abf2773630246ef78e8e65daf9f047e705aefc360f
- MD5 db80eb65e63d8c5f77753702aa337d94
- SHA1 f92ec091b79493e52af89f1a77faf16670af3617
- SHA512 429c7b7a0e85b6d8b43574b7c296460cfc7a6e1670ee098dd7f58ff4fd2a484e899a85df545fc7c08cfcc989008d13a99bcedb0106d50e34d7406e154fdaf2cb
- SSDEEP 49152:nj9LxcO4Q5YCfeK51rgXteP3Vz9oI2mhoNosVDP+fXoVO8y:njBxcO4EYC2K59sePl9oGoNoswfv/
- TLSH T164A5F112B2814071D87711B1459AEB3BDA34FA2457214BDFE7C4CE24AF72AD16A3D32B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory